SYSCO CORPORATION
ent_019e289463d28682891903a8d308f833
Disclosures
17
State AG · Leak Site · 13 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
126,243
nationwide · State AG ME
Leak-site claims
3
unverified actor claims
Identity resolution
- Canonical name
- SYSCO CORPORATION
- Normalized
- sysco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5RGWIFLMGH3YS7KWI652
- SEC EDGAR CIK
- 0000096021
- Domain
- sysco.com
Disclosure history (17)newest first
- Vermont State AGas victim2026-07-28
Sysco Corporation reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-28. The reporting organization type is Other Commercial. 9 Vermont residents were affected. Categories of data breached: Social Security Numbers.
- Massachusetts State AGas victim2026-07-28
Sysco Corporation notified Massachusetts residents of a cybersecurity incident discovered on April 23, 2026. An unauthorized third party accessed certain files containing personal information, including names. Sysco contained the breach, notified law enforcement, engaged forensic experts, and offered 24 months of identity theft protection via Experian. The notification was sent on July 22, 2026.
- Indiana State AGas victim2026-07-22
Sysco Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-14 and was reported on 2026-07-22. 387 Indiana residents were affected. 1,468 individuals affected in total.
- Nebraska State AGas victim2026-07-22
Sysco Corporation notified Nebraska residents of a cybersecurity incident discovered on April 23, 2026. An unauthorized third party accessed files containing names and additional personal information. Sysco contained the breach, notified law enforcement, engaged forensic experts, and offered 24 months of identity theft protection via Experian. Notification letters were sent on July 22, 2026.
- GLOBALLeak Siteas victim2026-06-15
Over 61 million Salesforce records across several tables, some containing customer data/PII, employee data, and other internal corporate data was compromised. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
- GLOBALLeak Siteas victim2023-05-27
Sysco Corporation is an American multinational corporation involved in marketing and distributing food products, smallwares, kitchen equipment and tabletop items to restaurants, healthcare and educational facilities, hospitality businesses like hotels and inns, and wholesale to other companies that provide foodservice. Sysco is the world's largest broadline food distributor; it has more than 600,000 clients in a wide array of fields. Management consulting is also an integral part of their services. The company operates approximately 330 distribution facilities worldwide; providing service to over 90 countries.
- Massachusetts State AGas victim2023-05-17
Sysco Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-17. 1,613 Massachusetts residents were affected. The report records the breach type as electronic.
- Washington State AGas victim2023-05-17
Sysco Corporation reported a cybersecurity event in Washington affecting 1,977 current and former employees. Unauthorized access occurred between Jan 14 and Mar 5, 2023. Impacted data included names, SSNs, and payroll account numbers. Sysco engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
- Maine State AGas victim2023-05-17
Sysco Corporation reported an external system breach (hacking) occurring on January 14, 2023, discovered on March 5, 2023. The incident affected 126,243 individuals, including 667 Maine residents. Compromised data included names and Social Security Numbers. The company provided 24 months of credit monitoring and fraud remediation via Experian IdentityWorks.
- South Carolina State AGas victim2023-05-17
Sysco Corporation notified South Carolina of a cybersecurity event where a threat actor gained unauthorized access to systems starting Jan 14, 2023. Discovered March 5, 2023, the incident impacted personal info of current/former colleagues, including SSNs and payroll data. Sysco engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
- Hawaii State AGas victim2023-05-17
Sysco Corporation notified Hawaii residents of a cybersecurity event where unauthorized access occurred starting Jan 14, 2023. Discovered March 5, 2023, the incident impacted employee PII including SSNs and payroll data. Sysco engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
- California State AGas victim2023-05-16
Sysco Corporation disclosed a cybersecurity event where an unauthorized threat actor gained access to systems starting January 14, 2023, detected on March 5, 2023. Personal information of current and former colleagues, including names, SSNs, and account numbers, was potentially compromised. Sysco engaged forensic experts, notified law enforcement, and offered 24 months of identity protection.
- Oregon State AGas victim2023-05-16
Sysco Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-16. The breach occurred during 1/14/2023 - 3/5/2023. The breach was discovered on 3/5/2023. 126,243 individuals were affected. Notice was sent on 5/5/20235/8/2023.
- New Hampshire State AGas victim2023-05-16
Sysco Corporation notified the NH AG of a cybersecurity event where an external threat actor gained unauthorized access to systems starting Jan 14, 2023. Discovered March 5, 2023, the incident likely involved PII of employees and limited customer/supplier data. 199 NH residents were notified. Sysco engaged forensic professionals, contacted law enforcement, and offered 24 months of credit monitoring via Experian.
- Indiana State AGas victim2023-05-05
Sysco Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-14 and was reported on 2023-05-05. 1,673 Indiana residents were affected. 126,243 individuals affected in total.
- GLOBALLeak Siteas victim2023-03-05
- Illinois State AGas victim2023-01-01
SYSCO CORPORATION filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-312). The register records the breach as discovered on January 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.