InformationalBreach / campaignMonitoring

Performance Food Group discloses cyber incident in SEC Form 8-K filing

Performance Food Group discloses a cyber incident in an SEC 8-K filing, per SEC EDGAR; details are not confirmed, so watch for official company updates.

Published
Exploitation
No, not confirmed: the available filing text does not describe the incident, its cause or any exploitation

What happened

An SEC EDGAR headline dated 2026-11-04 says that Performance Food Group Co discloses a cyber incident in an SEC Form 8-K filing (SEC EDGAR).

The text available at that link is Exhibit 99.1, a news release dated November 4, 2026. In it, Performance Food Group Company reports its first-quarter fiscal 2027 results (SEC EDGAR). The part of the exhibit provided does not describe a cyber incident.

The available sources do not confirm these details:

  • The nature of the incident.
  • When the incident was detected.
  • The affected systems.
  • Whether any data was accessed or taken.
  • The cause or entry point.
  • Who was responsible.
  • Any operational or financial impact.

The available sources include no independent reporting or verification.

Am I affected?

Not confirmed. The available sources do not say which systems, customers, suppliers or data, if any, are involved.

What to do now

  1. Read Performance Food Group’s filings on SEC EDGAR directly (SEC EDGAR), and check for any amended or follow-up 8-K that describes the incident.
  2. If you do business with Performance Food Group, wait for direct notice from the company before assuming any of your data or integrations are involved.
  3. Be careful with unsolicited messages that mention this incident. Verify them through contacts you already know at the company.

Sources