Lusamerica Foods, a wholesale company based in California, was affected by a ransomware attack around January 31, 2026. A ransomware group known as PLAY claimed responsibility on February 13, 2026, stating they accessed data. The company reported the incident to the California Attorney General on May 18, 2026.
The breach reportedly involved names, Social Security Numbers, dates of birth, addresses, government IDs, medical information, and financial information. However, Lusamerica Foods did not provide explicit details about the specific types of consumer information exposed in its consumer notification. The exact number of affected individuals and other states impacted beyond California are not publicly known.
Details about data breaches often emerge over time, and consumer notifications may be delayed.