A ransomware attack targeting Blue Yonder, a key supply chain management software provider, has severely impacted businesses like Starbucks and Morrisons, disrupting payroll systems and forcing manual operations.
Starbucks and Major Retailers Hit by Disruptive Ransomware Attack

Starbucks and Major Retailers Hit by Disruptive Ransomware Attack
Cyberattack on supply chain manager Blue Yonder disrupts payroll and operations for companies including Starbucks and Morrisons.
A recent ransomware attack on Blue Yonder, a leading Arizona-based supply chain management software provider, has sent ripples across major international companies reliant on its services, including Starbucks and Morrisons, one of Britain's largest grocery chains. The incident, characterized by significant disruptions to managed services, has raised concerns over operational security and service restoration timelines.
In a statement issued last week, Blue Yonder confirmed that it had experienced notable disturbances within its managed services hosted environment, attributing these issues to the cyber attack. The company has recruited external cybersecurity experts to assist in navigating the repercussions of this incident, which it stated remains unresolved, without providing a definitive timeline for full restoration of services.
Founded in 1985, Blue Yonder prides itself as a pioneer in digital supply chain transformation, boasting a client roster of over 3,000 companies. These clients depend heavily on the digital, A.I.-driven software for critical operations, including payroll and supply chain management. However, the impact of the ransomware attack has not been fully disclosed, leaving clients and consumers in limbo regarding the extent of collateral damage.
Starbucks personnel have been particularly affected, forced to revert to manual scheduling and payroll processes due to the outage, according to reports from The Wall Street Journal. The disruption reportedly spans approximately 11,000 stores across North America. However, a spokesperson for Starbucks reassured that employees would be compensated for their work hours and that customer service operations remain unaffected by the incident.
Similarly, Morrisons has confirmed that the cyberattack has disrupted its warehouse management systems, affecting operations related to fresh produce delivery. Morrisons is among several large retailers using Blue Yonder’s solutions, alongside U.K.-based Sainsbury's and others.
As the Blue Yonder team continues to tackle the aftermath of the cyberattack, the situation underscores the vulnerabilities faced by businesses relying on digital infrastructures—and the potential cascading effects of cybersecurity breaches in an increasingly interconnected marketplace.