What Happened?
On December 3, 2025, Dot Foods and DTI identified suspicious activity involving a small number of employee email accounts. Upon discovery, the companies immediately secured the impacted accounts and launched an extensive investigation with the assistance of cybersecurity and computer forensics specialists. The investigation determined that an unauthorized actor accessed certain email messages between December 3 and December 4, 2025. While it could not be confirmed whether attachments to those emails were viewed, Dot Foods and DTI could not rule out the possibility. On December 15, 2025, Dot Foods and DTI discovered that an attachment to one of the emails contained personal information. As an additional precaution, access to the Dot Rewards platform was also locked down due to unauthorized access.
Dot Foods and DTI began notifying impacted employees via email starting December 17, 2025. On January 7, 2026, Dot Foods filed notice on behalf of both companies with the Attorney General of Maine.