Sysco (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 28 June 2026. It affected 1,468 people. Exposed: Social Security numbers, Email addresses, Phone numbers, Names, Addresses and Usernames and more.
Breach reported 28 June 2026
Status
Confirmed breach
People affected
1,468 people
Reported
28 June 2026
What was exposed
Social Security numbers
Email addresses
Phone numbers
Names
Addresses
Usernames
Customer feedback
Employers
Job titles
What changed since it was first reported
Confirmed breach, 1,468 people (Indiana Attorney General)
Official notices are read by code from the regulator’s own register. Breach databases are read by code. More notices to Vermont, Indiana. · Corrections and changes
Breach reported 16 May 2023
Status
Confirmed breach
People affected
126,243 Oregon residents (one state’s count; the total can be higher)
Reported
16 May 2023
Across the state notices
at least 128,220 people (Oregon and Washington: each state counts only its own residents)
Breach began
14 January 2023
Time to tell
122 days (the median in California’s notices over the last year: 154 days)
What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Look for Sysco Corporation’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Expect scams that use your details: calls, texts or emails pretending to be Sysco Corporation, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked