On August 12, 2026, Desert De Oro Foods, Inc. discovered that an unauthorized third party had accessed a corporate email account and computer belonging to an employee. This unauthorized access occurred between August 5 and August 12, 2026. The company secured its systems and engaged third-party cybersecurity experts to investigate the incident. Notification letters were subsequently mailed to affected current and former employees on September 26, 2026.
The investigation revealed that the unauthorized party may have accessed human resources data stored within the compromised account and email. The exposed information includes names, Social Security numbers, addresses, government identification information, and health insurance identification numbers (member IDs). While some summaries mention financial data, this remains unconfirmed by official letter excerpts. The total nationwide number of affected individuals has not been publicly disclosed, though four Massachusetts residents were specifically identified as affected in a state filing.
Additional details about the full scope of the breach, including the total number of affected individuals and any further compromised data types, may emerge as investigations continue and more information becomes available.