In July 2026, Restaurant Depot was listed by the Play ransomware group, which claimed to have exfiltrated internal files. The incident was reported by ransomware tracking sites.
The number of individuals affected has not been disclosed or confirmed. The specific types of data exposed beyond "internal files" also remain unconfirmed; details such as SSNs, medical data, or financial data have not been provided. No official breach notification letter, company statement, or state attorney general filing has been found.
More details may emerge as the situation develops, and official notices may be delayed.