America’s Food Basket, Inc. has told people that a recent data security incident may have affected their personal information, and it is offering complimentary credit monitoring and fraud assistance.
Here is what the notice says, what it leaves out, and what you can do if you received one.
America’s Food Basket’s Data Breach Investigation
America’s Food Basket, Inc. is a grocery cooperative that supports independent grocery store owners. This page is based on a notification letter the company filed with the Massachusetts state government, which publishes breach notification letters on a public list. The filed letter is dated October 13, 2026, and is titled a notice of data security incident.
In the letter, the company says it is writing about a recent data security incident that may have affected the security of the recipient’s personal information. It says that since discovering the incident it moved quickly to respond, isolate, contain and secure the affected systems, and that it is putting in place additional technical safeguards, enhanced security measures and updated procedures to reduce the risk of future problems.
The sample letter filed with the state does not say which information was involved. The sentence that should list the data types is incomplete in the filed copy and refers only to a name alongside a blank. That means the public filing does not tell readers which personal details were exposed for which people. This page does not guess at them, and recipients should rely on the information in their own letter.
The notice also leaves out several other facts. It does not say how the incident happened, when it began or was discovered, who was responsible, or how many people overall were affected. A section for Rhode Island residents says one Rhode Island resident was potentially affected, but that is a state figure, not a total. This page does not state a total because none has been published in the filing.
The company says it is providing access to single bureau credit monitoring, a single bureau credit report and a single bureau credit score at no charge. The letter says these services send alerts for twenty-four months from the date of enrollment when changes occur to a person’s credit file, and that the alert is sent on the same day the bureau makes the change. The company also says it is providing proactive fraud assistance to help with questions or if a person becomes a victim of fraud.
The services are provided by Cyberscout, a TransUnion company that specializes in fraud assistance and remediation. The company says it is covering the cost, but people must complete the activation process themselves using the instructions and unique code in their letter. People must enroll within 90 days of the date of the letter, and enrollment needs an internet connection and an email account. The service may not be available to people under 18, and people may be asked to verify personal information when signing up.
The letter lists a toll-free number for questions, open on weekdays from 8 a.m. to 8 p.m. Eastern time, excluding major U.S. holidays. If you did not receive a letter but believe your information may have been involved, calling that line is a reasonable first step, since the sample filed with the state is a template that would have been personalized for each recipient.
The notice also includes standard consumer protection information. It points readers to annualcreditreport.com for a free credit report, explains rights under the federal Fair Credit Reporting Act, describes credit freezes, and lists state-specific contact details for residents of several states, including Massachusetts, where residents are advised of their right to obtain a police report in connection with the incident.
Where a notice does not say what was exposed, treat it as a prompt to tighten the basics. Review your credit reports, watch account statements, and be careful with unexpected calls, texts or emails that mention the incident. Scammers often follow publicized breach notices with messages that ask for personal details. If you are unsure whether a message is genuine, contact the company using details from its own website rather than details in the message.
When Did This Breach Occur?
The company’s notification letter is dated October 13, 2026.
The notice does not state when the incident occurred or when it was discovered.
What Information Was Breached?
The notice says personal information, including a name, may have been subject to unauthorized access. The filed sample does not list the other data types.
The company has not published a full list of data elements. Your own letter should describe the information that applies to you.
What You Can Do
If you received a notice related to America’s Food Basket or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Enroll in the complimentary credit monitoring within 90 days of the date on your letter, using the code and instructions it contains.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against America’s Food Basket
If your personal information was exposed in this incident, you may have legal options. Organizations are expected to protect the sensitive information they are trusted with, and a class action can help hold them accountable when security falls short.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
