Del Monte Foods Corp. II Inc.
Incident posture
Linked entities
- Victim
- Del Monte Foods Corp. II Inc.
- Threat actors
- 1 actor
- Sources
- 1 source
Timeline
Summary
Del Monte Foods Corp. II Inc. detected a network operability issue and launched an investigation with independent cybersecurity experts that determined unauthorized parties acquired certain files from its systems. A ransomware group claimed responsibility on the dark web, stating it had obtained approximately 1.2 terabytes of internal data, and the company later learned the compromised files contained personal information including names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records. The company disclosed the incident to state attorneys general, began notifying affected consumers, implemented enhanced security measures, and is cooperating with law enforcement while offering complimentary identity protection services to those impacted.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
Del Monte Foods Corp. II Inc., an American food production and distribution company headquartered in Walnut Creek, California, detected an issue affecting its network operability on February 9, 2026, and began an investigation with independent cybersecurity experts. The investigation determined that unauthorized parties acquired certain files from the company's systems, and the breach reportedly occurred on February 7, 2026. On or about August 20, 2026, Del Monte learned that the compromised data contained personal information. While the investigation was underway, a ransomware group known as Payouts King claimed responsibility for the attack on the dark web on March 31, 2026, stating that it had obtained about 1.2 terabytes of Del Monte's internal data. Del Monte disclosed the incident to the Attorneys General of California, Massachusetts, and Vermont on October 29, 2026, and began notifying affected consumers in late October 2026. The company stated that it implemented enhanced security measures and is cooperating with law enforcement.
The personal information involved may include names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records. Because Social Security numbers, financial account information, and health records were among the exposed categories, the exposure creates a heightened risk of identity theft and financial fraud for affected individuals. Del Monte is offering affected individuals complimentary identity protection services through Kroll, using the unique enrollment code included in each notification letter before the stated deadline. The national class action law firm Edelson Lechtzin LLP is investigating potential class action claims on behalf of individuals whose data may have been compromised. Anyone who received a breach notice or believes their information may have been exposed can request a free case evaluation from the firm.
Sources
Sources available to members: 1 source.