Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

United Natural Foods, Inc. (UNFI) estimated in July 2025 that the cyber incident it discovered the previous month would reduce fiscal 2025 net sales by approximately $350 million to $400 million. The $400 million figure is the high end of management’s estimate—not a final audited tally of sales definitively lost. UNFI separately projected impacts of $50 million to $60 million on net income and $40 million to $50 million on adjusted EBITDA, excluding anticipated insurance proceeds.

What did UNFI estimate the attack would cost?

In its July 2025 business update, UNFI estimated that the incident would reduce fiscal 2025 net sales by approximately $350 million to $400 million. The company also projected a $50 million to $60 million net-income impact and a $40 million to $50 million adjusted EBITDA impact. These are separate measures: net sales are revenue, while net income and adjusted EBITDA reflect earnings after costs and other items. UNFI said the estimates excluded anticipated insurance proceeds. UNFI’s July 2025 business update

The sales estimate should be read as management’s forecast of the incident’s effect on fiscal 2025, not as a later audited calculation of sales that were permanently lost. UNFI attributed the impact to reduced sales volume, increased operating costs, and direct investigation and remediation expenses. UNFI’s June 23, 2025 Form 8-K

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What happened in the June 2025 incident?

UNFI said it became aware of unauthorized activity on certain IT systems on June 5, 2025. Its June 9 Form 8-K states: “On June 5, 2025, United Natural Foods, Inc. (the “Company”) became aware of unauthorized activity on certain of its Information Technology (IT) systems.” The company activated its incident response plan and proactively took some systems offline, temporarily affecting its ability to fulfill and distribute customer orders. It said it used workarounds where possible and worked to restore systems; its initial filing described the investigation as ongoing. UNFI’s June 9, 2025 Form 8-K

In a later June filing, UNFI reported lower sales volume and increased operating costs in the weeks following the incident, as well as investigation and remediation expenses. In July, CEO Sandy Douglas thanked customers, suppliers, and associates for their “resilience and collaboration as we worked through a challenging period for all of us.” The company said at that time it did not expect meaningful operational or financial effects beyond fiscal fourth-quarter 2025 apart from insurance reimbursement; that was its then-current expectation, not a statement about all subsequent accounting. UNFI’s July 2025 business update

Customer-side evidence of disruption

Natural Grocers reported product shortages in June and July 2025 after UNFI’s fulfillment and distribution capacity was temporarily affected. Its annual report said distribution normalized in the following weeks. This is evidence from one customer and should not be taken as a measure of disruption for every UNFI customer. Natural Grocers’ fiscal 2025 annual report

What do UNFI’s later disclosures show?

UNFI’s fiscal 2026 reporting adds accounting context beyond the July 2025 estimate. Fiscal 2026 ended August 1, 2026; fiscal 2025 ended August 2, 2025. UNFI reported fiscal 2026 net sales of $31.152 billion, down 2.0% from $31.784 billion in fiscal 2025. Its annual report attributes the change primarily to declines in Conventional and Retail, partly offset by Natural growth and the comparison against the prior-year cyber incident. The 2.0% year-over-year decline therefore should not be treated as the attack’s sales impact. UNFI’s fiscal 2026 Form 10-K

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The annual report records $24 million in fiscal 2026 incident-related costs and charges: $20 million in gross profit and $4 million in operating expenses. These later costs are distinct from the July 2025 estimate of fiscal 2025 sales, net-income, and adjusted EBITDA impacts. UNFI’s fiscal 2026 Form 10-K

Insurance disclosures differ

UNFI’s fiscal 2026 annual report says the company received $50 million in incident insurance proceeds during fiscal 2026. Its September 8, 2026 results release lists $45 million of fiscal 2026 insurance recoveries. The reviewed disclosures do not reconcile the different amounts, so they should be reported with their respective document descriptions rather than combined or treated as interchangeable. UNFI’s fiscal 2026 Form 10-K; UNFI’s September 2026 results release

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What is—and is not—established about the attack?

The cited company and customer filings establish unauthorized activity on certain UNFI IT systems, an operational response that included taking systems offline, temporary order-fulfillment and distribution disruption, and financial impacts disclosed by UNFI. They do not establish an attack group, malware family, ransom demand, confirmed data theft, or named third-party security product. Those details should not be inferred from the sales estimate or the operational disruption.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.