What Happened?
On September 12, 2025, FirstFruits Farms became aware of a security incident within its internal environment. Upon detection, FirstFruits Farms launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to certain FirstFruits Farms systems and may have accessed or acquired data. On December 29, 2025, FirstFruits Farms began sending notice letters to impacted individuals. On January 16, 2026, FirstFruits Farms submitted a notice of the breach to the Washington Attorney General’s office.