United Natural Foods warns cyberattack to hit Q4 profit; operations restored

United Natural Foods (NYSE: UNFI) filed an 8-K disclosing a material cybersecurity incident first detected on June 5, 2025.

Rhea-AI Filing Summary

United Natural Foods (NYSE: UNFI) filed an 8-K disclosing a material cybersecurity incident first detected on June 5, 2025. Containment steps briefly halted order fulfillment, but core ordering and invoicing systems are now restored and shipping has resumed. Management cites reduced sales volume, higher operating costs and ongoing remediation expenses, and believes the event is reasonably likely to materially lower Q4-FY25 net income and adjusted EBITDA versus prior internal projections. The company carries cyber-insurance it expects will offset most losses, though claims may extend into FY26. No consumer personal or protected health information was compromised. UNFI will release an updated FY25 outlook in July and does not foresee long-term strategic objectives being affected.

Positive

• Core ordering and invoicing systems have been fully restored, allowing distribution operations to normalize
• Company expects cyber-insurance to cover most incident-related costs, reducing long-term cash impact

Negative

• Management expects a material negative impact on Q4 FY25 net income and adjusted EBITDA due to lower sales and higher costs
• Incident-related investigation and remediation expenses will continue and claims may stretch into FY26

Insights

Equity Analyst

Earnings hit confirmed; insurance helps but Q4 estimates face downside.

The filing signals an unavoidable near-term profit drag. Management explicitly warns of a "material" shortfall in net income and adjusted EBITDA for the July quarter, implying consensus estimates need to be revised down. While operations are back online, the lost sales window is closed and incremental costs linger. Insurance recovery should limit cash outflow, yet the timing—stretching into FY26—creates working-capital pressure. Importantly, management says long-term goals are intact, tempering valuation damage. Still, the market typically prices in the immediate earnings reset first. Until quantitative guidance arrives in July, uncertainty remains elevated.

Cybersecurity Risk Analyst

Containment achieved; limited legal exposure but operational risk realized.

The incident appears confined to IT infrastructure, with no evidence of personal data compromise, reducing regulatory and class-action risk. Rapid restoration of ordering platforms suggests robust continuity planning, yet the temporary shutdown exposed supply-chain fragility and imposed tangible cost. Persistent monitoring costs and system hardening will pressure margins beyond direct remediation. Insurance should mitigate financial loss, but claim adjudication can be lengthy and may not cover every line item. Overall cyber-maturity seems adequate, but investors should expect heightened capex and opex for security in the next fiscal year.

8-K Event Classification

2 items: 1.05, 7.01

2 items

Item 1.05 Material Cybersecurity Incidents Business

A cybersecurity incident that the company has determined to be material to investors.

Item 7.01 Regulation FD Disclosure Disclosure

Material non-public information disclosed under Regulation Fair Disclosure, often investor presentations or guidance.

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

Will UNFI's cybersecurity incident affect Q4 2025 earnings?

Yes. Management states the event is "reasonably likely" to have a material negative impact on Q4 FY25 net income and adjusted EBITDA.

Did UNFI's cyberattack expose customer or health data?

No. The company does not expect to notify consumers because no personal or protected health information was involved.

Does UNFI have insurance coverage for the cyber incident?

UNFI holds cybersecurity insurance it believes will be adequate; the full claim and settlement process may extend into fiscal 2026.

When will UNFI update its fiscal 2025 outlook?

Management plans to provide an updated FY25 financial outlook, including the incident’s quantitative impact, in July 2025.

Will the cyber event alter UNFI's long-term strategy?

The company does not expect a material impact on its longer-term strategic or financial objectives.

AI-generated analysis. How Rhea-AI works. Not financial advice.

Understanding 8-K Material Events →

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Accepted by SEC EDGAR 06/26/2025 - 04:46 PM EDT Learn about SEC filing dates

0001020859FALSE00010208592025-06-212025-06-21

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

______________________

FORM 8-K

CURRENT REPORT

Pursuant to Section 13 or 15(d) of The

Securities Exchange Act of 1934

Date of Report (Date of earliest event reported): June 21, 2025

UNITED NATURAL FOODS, INC.
(Exact name of registrant as specified in its charter)
Delaware (State or other jurisdiction of incorporation)			001-15723 (Commission File Number)			05-0376157 (IRS Employer Identification No.)
313 Iron Horse Way, Providence, RI 02908
(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (401) 528-8634

N/A

(Former name or former address, if changed since last report.)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):

☐ Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

☐ Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

☐ Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

☐ Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:

Title of each class			Trading Symbol(s)			Name of each exchange on which registered
Common stock, par value $0.01			UNFI			New York Stock Exchange

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter). 

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Item 1.05    Material Cybersecurity Incident.

As previously disclosed in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”) on June 9, 2025 (the “Prior 8-K”), on June 5, 2025, United Natural Foods, Inc. (the “Company”) became aware of unauthorized activity on certain information technology (IT) systems. As disclosed in the Prior 8-K, the Company promptly activated its incident response plan and implemented containment measures, including proactively taking certain systems offline, which temporarily impacted the Company’s ability to fulfill and distribute customer orders. At this time, the Company does not anticipate sending any notifications to individual consumers as a result of this incident because it did not involve a breach of security of personal information or protected health information, as those terms are defined at law.

The unauthorized activity has since been contained and the Company is now regularly receiving and shipping products to retailers across its distribution network. Importantly, the Company has safely restored the core systems that its customers and suppliers use for electronic ordering and invoicing, which has enabled business operations to normalize. Throughout this process, the Company focused on proactively and transparently engaging with its customers and suppliers to support their unique business needs.

The Company has continued to closely monitor the effect of the incident on its business, financial condition, and results of operations. In the weeks following the incident, the Company experienced reduced sales volume and increased operational costs as the Company worked to drive solutions-oriented results for its customers. The Company has also incurred, and expects to continue to incur, direct expenses related to the investigation and remediation of the incident. Based on the information currently available to the Company, management believes that the incident is reasonably likely to have a material impact on the Company’s net income/(loss) and adjusted EBITDA for the fourth fiscal quarter of 2025 compared to its internal projections prior to the incident. The Company holds cybersecurity insurance that it currently expects will be adequate for the incident, and expects that the full claim and settlement process will extend into its 2026 fiscal year.

Item 7.01    Regulation FD Disclosure.

The Company intends to provide an update on its financial outlook for the remainder of fiscal year 2025 in July that is expected to reflect the Company’s strong operating results through the third quarter of fiscal 2025 and performance in the fourth quarter of fiscal 2025, including the anticipated quantitative impact of the incident described above in Item 1.05.

As of the date hereof, the Company does not expect that the incident described above in Item 1.05 will have a material impact on its financial condition or its ability to achieve its previously disclosed longer-term strategic and financial objectives.

The information contained in this Item 7.01 of this Current Report on Form 8-K shall not be deemed “filed” for any purpose, including for the purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), or otherwise subject to the liabilities of that Section, and shall not be deemed incorporated by reference into any filing under the Securities Act of 1933, as amended (the “Securities Act”), or under the Exchange Act, regardless of any general incorporation language in such filing.

Forward-Looking Statements

This Current Report on Form 8-K contains forward-looking statements made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, Section 27A of the Securities Act and Section 21E of the Exchange Act, including without limitation, the Company’s expectations or beliefs regarding future events, actions or performance related to the incident, including the results of the Company’s investigation of the incident and the impact on the Company and its financial condition and results of operations. Forward-looking statements typically are identified by use of terms such as “anticipate,” “believe,” “expect,” “project,” “may,” “will,” “should,” “could,” “likely” and similar words. Except as required by law, the Company undertakes no obligation to publicly update or revise any forward-looking statements, whether as a result of new information, future events or otherwise. The Company’s actual results could differ materially from those contained in forward-looking statements due to a number of factors, including but not limited to: the ongoing assessment and investigation of the incident, the adequacy of the Company’s response and effectiveness of its business continuity plans, the magnitude of the potential disruption to the Company’s business and operations, and the legal, regulatory, reputational and financial risks resulting from the incident as well as other factors that are described in the Company’s filings under the Securities Exchange Act of 1934, as amended, including under the section entitled “Risk Factors” in the Company’s Annual Report on Form 10-K for the year ended August 3, 2024 filed with the Securities and Exchange Commission (the “SEC”) on October 1, 2024 and other filings the Company makes with the SEC. Any forward-looking statements are made pursuant to the Private Securities Litigation Reform Act of 1995 and, as such, speak only as of the date made. Any estimates of future results of operations are based on a number of assumptions, many of which are outside the Company’s control and should not be construed in any manner as a guarantee that such results will in fact occur. The Company undertakes no obligation to publicly update or revise any forward-looking statements, whether as a result of new information, future events or otherwise, except as required by law.

SIGNATURES

    Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

UNITED NATURAL FOODS, INC.
By:			/s/ Giorgio Matteo Tarditi
Name:			Giorgio Matteo Tarditi
Title:			President and Chief Financial Officer

Date:    June 26, 2025