America’s Food Basket

The ransomware group Wallstreet has claimed a data breach against America’s Food Basket, a U.S. cooperative grocery-store network that operates stores under the America’s Food Basket and Ideal Food Basket names. According to our investigation team, the listing appeared on the group’s leak site around September 3, 2026, and our team estimates the attack occurred on the same date. The company, which runs the website afbasket.com, had not publicly confirmed the incident as of September 25, 2026, and no regulatory filing or company notice describing the breach was found in the sources reviewed. What is documented so far is an attacker claim, not a confirmed corporate disclosure.

Limited public reporting: As of September 25, 2026, detailed company notices or major news coverage for this listing were limited in sources reviewed. The facts below rely primarily on the indexed fields plus any secondary sources cited.

The listing was tracked by threat-monitoring services. Ransomware.live recorded the America’s Food Basket entry on Wallstreet’s leak site with a discovery timestamp of September 3, 2026, at 11:22 UTC. Breachsense lists the victim as posted on September 4, 2026, and notes Wallstreet claimed eight victims in the preceding 30 days. Independent trackers such as GalaxyWarden and Ransomnews characterize the listing as an unverified extortion claim, and neither has found independent confirmation that data was actually stolen or published.

What Information Was Compromised?

Our analysis found the following data types in this breach: names (7,414 records), email addresses (7,404), street addresses (6,431), phone numbers (5,992), and dates of birth (10,563). Our investigation team estimates the indexed dataset contains about 10,563 rows in total. Not every record includes every field: while dates of birth appear throughout the dataset, contact details such as email addresses and phone numbers are present for a smaller share of the individuals.

Not every individual is affected by every type of data listed here.

Because the company has not issued its own notice, this inventory comes from our indexed analysis of the leaked material rather than from a company statement. The full extent of the compromise has not been independently verified.

What Are the Potential Risks for Affected Individuals?

Dates of birth combined with names and addresses are the building blocks of identity fraud. Criminals can use them to answer security questions, open accounts in someone else’s name, or make phishing messages far more convincing. Emails and phone numbers in the same dataset make targeted scams easier: a caller who knows your name, address, and birthday sounds far more legitimate than a random spam call.

There is no indication in the indexed fields that passwords, payment card numbers, or government identification numbers were part of this dataset, but that does not rule out other material in the attackers’ possession. Financial account monitoring is still a sensible precaution.

What Should You Do If You Were Affected?

Watch your credit. Request a free credit report from each bureau through AnnualCreditReport.com and look for accounts or inquiries you do not recognize.

Place a fraud alert or security freeze. A freeze with Equifax, Experian, and TransUnion blocks most new-account fraud at no cost.

Be skeptical of contact that “knows too much.” Delete or hang up on messages referencing your personal details, and never confirm information to unsolicited callers.

Check your accounts. Review bank, brokerage, and benefits accounts for unfamiliar activity, and enable multi-factor authentication wherever it is offered.

Watch for a company notice. If America’s Food Basket issues a breach notification, follow the guidance it provides, including any credit-monitoring offers.