Sysco Corp Data Breach Exposes Social Security Numbers

Sysco Corp., the global leader in foodservice distribution, is notifying individuals about a cyberattack that exposed personal information.

On April 23, 2026, Sysco became aware of unauthorized activity in certain parts of its computer environment, according to the company's notification letter. The company began an investigation and took steps to contain the activity.

On May 5, 2026, Sysco learned that the unauthorized third party may have obtained certain files from the company's environment. The company then conducted an extensive review of those files to determine whether they contained personal information.

On June 25, 2026, Sysco determined that the affected files did include personal information belonging to certain individuals.

On June 14, 2026, a threat actor known as ShinyHunters posted on the Tor network alleging it had breached Sysco and compromised over 61 million Salesforce records across several database tables. According to the dark web posting, the compromised data included customer data, personally identifiable information, employee data and other internal corporate data. The group stated it intended to publish the data within three days.

This is not the first time Sysco has been targeted by cybercriminals. According to dark web intelligence, the company previously fell victim to Qilin ransomware on May 6, 2026, just weeks before the current incident was discovered on April 23, 2026.

The types of personal information confirmed as exposed in this breach included names and Social Security numbers.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation and the Vermont Attorney General.

The company mailed notification letters to affected individuals on July 22, 2026. A total number of affected individuals across all states has not been publicly disclosed.

Sysco's response to the breach

Sysco is offering affected individuals 24 months of complimentary identity theft protection and credit monitoring through Experian IdentityWorks.

Affected individuals must enroll by Oct. 31, 2026, to activate the complimentary membership. Those with questions or who need assistance enrolling can call 833-918-8818, Monday through Friday, 8 a.m. to 8 p.m. Central Time.