LaBonne's Market, operating as Hy LaBonne & Sons Inc., experienced a hacking-related data incident. The breach was publicly reported in May 2026, with the PLAY ransomware group claiming responsibility and posting data on the dark web in October 2025.<
Regulatory filings indicate that names and Social Security numbers may have been involved. A total of 77 individuals were confirmed affected, with 67 residents in Massachusetts and 10 in Vermont. The company offered 24 months of complimentary credit monitoring and identity theft protection through Experian IdentityWorks.
Investigations by legal firms, including Federman & Sherwood and Strauss Borrelli PLLC, are underway suggesting potential class-action lawsuits. The exact dates of the initial compromise and regulatory disclosures are not fully detailed in available sources.