BNP Distributing Inc., a New York City-based foodservice and beverage distributor, was listed as a victim of a ransomware attack by the Safepay group on July 27, 2026. The Safepay group claimed to have exfiltrated internal files and made them available to other threat actors, though no sample files were published, and the exact contents remain unconfirmed. As of the reporting, BNP Distributing Inc. had not issued a public breach notification.
The types of data exposed are not yet specified beyond "internal files," and it is unclear if customer, employee, supplier, payment, SSN, medical, or financial data were included. The estimated number of affected individuals has not been disclosed, and no state filings or official statements from the company have been identified. The states affected by this incident are also not yet disclosed.
Further details regarding the nature and extent of the breach, including official notifications and confirmation of affected individuals or data types, may emerge at a later date.