Business Context and Reporting Period
Company: United Natural Foods, Inc. (UNFI)
Filing Type: Form 8-K (Current Report)
Date of Report: June 5, 2025
Event: Unauthorized activity on Information Technology (IT) systems.
Key Financial Metrics
This filing does not provide specific financial metrics such as revenue, profit, cash flow, margins, debt, or liquidity. The document focuses exclusively on a cybersecurity incident and its operational impact.
Material Changes and Operational Impact
- Cybersecurity Incident: On June 5, 2025, the Company became aware of unauthorized activity on certain IT systems.
- Operational Disruption: Containment measures, including taking systems offline, have temporarily impacted the ability to fulfill and distribute customer orders.
- Business Continuity: The Company has implemented workarounds to continue servicing customers where possible while working to restore systems safely.
- Investigation Status: The investigation into the scope and impact is ongoing and in its early stages.
Outlook, Risks, and Management Commentary
- Management Action: The incident response plan was activated, third-party cybersecurity professionals were engaged, and law enforcement was notified.
- Forward-Looking Statements: The Company cautions that actual results may differ materially from expectations regarding the nature, impact, and scope of the incident.
- Risks: Potential risks include legal, regulatory, reputational, and financial consequences resulting from the incident, as well as the magnitude of business disruption.
- Uncertainty: The filing does not provide a clear timeline for full system restoration or a quantified estimate of financial loss.
Investor Verification Checklist
- Verify the extent of customer order fulfillment delays and potential revenue impact.
- Monitor updates regarding the scope of data accessed or compromised.
- Track the timeline for the restoration of critical IT systems.
- Review future filings for any quantified financial costs related to remediation or legal liabilities.
- Assess the effectiveness of the implemented business continuity workarounds.