Berkot’s Super Foods Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH letter from Berkot’s Super Foods, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

​​​​​​​​On June 30, 2025, Berkot’s Super Foods (“Berkot’s”) reported a significant cybersecurity incident to the Maine Attorney General’s Office (the “Data Breach”). According to the notice, the breach was identified following unusual network activity detected on December 1, 2024, which prompted an immediate internal investigation. Berkot’s engaged cybersecurity specialists to assess the scope and impact. Investigation efforts confirmed that sensitive personal information may have been accessed by unauthorized actors. To date, specific details about the types of data compromised have not been publicly released. Approximately 11,090 individuals have been impacted by the Data Breach.

Recently, Berkot’s has begun sending data breach notification letters to those affected. These letters include an offer of complimentary credit monitoring services through IDX, as well as details on the specific type of information impacted once identified. If you received a data breach notification letter from Berkot’s Super Foods, it confirms that your data was affected by this Data Breach..

Berkot’s Super Foods is a privately owned grocery chain headquartered in New Lenox, Illinois. Founded in 1981, it operates 16 stores across the Midwest and employs over 1,000 people. The chain offers fresh produce, bakery goods, deli items, and prepared foods, and is known for its community‑focused service.. 

WHAT INFORMATION IS INVOLVED IN THE BERKOT’S SUPER FOODS DATA BREACH?

Berkot's Super Foods Data BreachBerkot’s has not yet specified which data elements were accessed. However, in line with state definitions and comparable incidents, the following types of information may have been involved:: 

  • Full name
  • Social Security number
  • Driver’s license or state ID number
  • Account, credit card, or debit card numbers (if usable independently)
  • Account passwords, PINs, or access codes.

We are actively monitoring for any updates and will provide more specific information as it becomes available.

This information is called your Personally Identifiable Information (“PII”). It tells others about you and is considered part of your identity. Businesses are required to secure this information or risk facing statutory penalties, among other legal penalties. Stolen PII can be used by identity thieves to engage in fraudulent activity using your identity. 

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. 

California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Berkot’s Super Foods, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.