CSIDB logo
Incident

Del Monte Foods Corp. II Inc.

Incident posture

Attack window
Feb 2026
Location
United States of America
Status
Unknown
CIA posture
Available to members
Updated
2026-11-03 23:07

Linked entities

Victim
Del Monte Foods Corp. II Inc.
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Feb 2026
Discovered
Feb 2026
Disclosed
Mar 2026
Resolved
Pending

Summary

Del Monte Foods Corp. II Inc. detected a network operability issue and launched an investigation with independent cybersecurity experts that determined unauthorized parties acquired certain files from its systems. A ransomware group claimed responsibility on the dark web, stating it had obtained approximately 1.2 terabytes of internal data, and the company later learned the compromised files contained personal information including names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records. The company disclosed the incident to state attorneys general, began notifying affected consumers, implemented enhanced security measures, and is cooperating with law enforcement while offering complimentary identity protection services to those impacted.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

Del Monte Foods Corp. II Inc., an American food production and distribution company headquartered in Walnut Creek, California, detected an issue affecting its network operability on February 9, 2026, and began an investigation with independent cybersecurity experts. The investigation determined that unauthorized parties acquired certain files from the company's systems, and the breach reportedly occurred on February 7, 2026. On or about August 20, 2026, Del Monte learned that the compromised data contained personal information. While the investigation was underway, a ransomware group known as Payouts King claimed responsibility for the attack on the dark web on March 31, 2026, stating that it had obtained about 1.2 terabytes of Del Monte's internal data. Del Monte disclosed the incident to the Attorneys General of California, Massachusetts, and Vermont on October 29, 2026, and began notifying affected consumers in late October 2026. The company stated that it implemented enhanced security measures and is cooperating with law enforcement.

The personal information involved may include names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records. Because Social Security numbers, financial account information, and health records were among the exposed categories, the exposure creates a heightened risk of identity theft and financial fraud for affected individuals. Del Monte is offering affected individuals complimentary identity protection services through Kroll, using the unique enrollment code included in each notification letter before the stated deadline. The national class action law firm Edelson Lechtzin LLP is investigating potential class action claims on behalf of individuals whose data may have been compromised. Anyone who received a breach notice or believes their information may have been exposed can request a free case evaluation from the firm.

Sources

Sources available to members: 1 source.

CSIDB