Connect with us

Hi, what are you looking for?


Data Breaches

Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack

PurFoods says the personal and protected health information of over 1.2 million individuals was stolen in a February 2023 ransomware attack.

Meal delivery service PurFoods says the personal and protected health information of more than 1.2 million individuals was stolen in a ransomware attack in early 2023.

Partnering with health, Medicare, and Medicaid plans, the Iowa-based organization is the parent of Mom’s Meals, a service that delivers health-focused, refrigerated, ready-to-eat meals throughout the US.

In a filing with the Maine Attorney General’s Office last week, PurFoods revealed that a ransomware attack impacting Mom’s Meals occurred in February and that it also involved the theft of personal information from its systems.

While the attack was identified on February 22, the attackers had access to PurFoods’ network for more than a month, the organization reveals.

“The investigation determined that PurFoods experienced a cyberattack between January 16, 2023, and February 22, 2023, that included the encryption of certain files in its network,” the company told Maine’s Attorney General.

The investigation also determined that the attackers exfiltrated from PurFoods’ systems files that stored personally identifiable information (PII) and protected health information (PHI), including names, birth dates, Social Security numbers, driver’s license numbers, payment card data, financial account information, and medical and health information.

The organization says it has started notifying the impacted individuals of the incident, providing them with identity theft and fraud protection guidance and with access to credit monitoring services.

Advertisement. Scroll to continue reading.

PurFoods also says it has informed the relevant authorities of the incident, including the US Department of Health and Human Services and the three major credit reporting agencies.

However, the organization has not shared details on how the intrusion occurred, which file-encrypting ransomware was involved, and whether a ransom was paid to restore the encrypted data.

SecurityWeek has emailed PurFoods for a statement on the matter and will update this article as soon as a reply arrives.

Related: Ohio History Organization Says Personal Information Stolen in Ransomware Attack

Related: Ransomware Group Starts Leaking Data From Japanese Watchmaking Giant Seiko

Related: 1.5 Million Impacted by Ransomware Attack at Canadian Dental Service

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join security experts as they discuss ZTNA’s untapped potential to both reduce cyber risk and empower the business.


Join Microsoft and Finite State for a webinar that will introduce a new strategy for securing the software supply chain.


Expert Insights

Related Content


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.


Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...


A SaaS ransomware attack against a company’s Sharepoint Online was done without using a compromised endpoint.


Several major organizations are confirming impact from the latest zero-day exploits hitting Fortra's GoAnywhere software.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.