In June 2025, a New York grocery chain started running out of yogurt and sparkling water. A bakery couldn't get flour.
Their customers had probably never heard of the company behind the problem.
It was United Natural Foods, or UNFI. You may never have seen its name, but you've probably eaten food it delivered. It is the main distributor for Whole Foods and supplies thousands of other grocery stores across North America.
On June 5, 2025, UNFI spotted unauthorized activity on its computer systems. It did what a responsible company does. It took systems offline to contain the threat.1
And then the trucks stopped making sense.
In its own filing, UNFI said the attack temporarily hurt its ability to fulfill and distribute customer orders.1 Deliveries were missed. Stores and bakeries scrambled to find other suppliers.2
A month later, UNFI put a price on it. It expected to lose $350 to $400 million in sales that year.2
Think about that. The attackers didn't steal that money. It vanished because the business couldn't do its job while the systems were dark.
That's this whole book in one story. A cyberattack turns into a supply chain problem the moment the systems that move goods go quiet. Ordering. Picking. Shipping. Receiving. When those stop, every truck, every worker, and every store down the line feels it.
One thing to be clear about. Nothing made public ties a camera or a gate reader to the UNFI attack, and I'm not claiming Findavi would have stopped it.
I'm telling the story because of what it shows. Security now has to reach past the office. Every device on the floor, every reader on the gate, every sensor in the cooler is part of the chain. If any link can be used as a way in, the whole chain can stop.
Questions for your team
If your ordering and shipping systems went offline tomorrow morning, how many hours could you keep trucks moving? Who would decide what to shut down, and how would they know what's safe to leave running?