CNN
—

A major software supply chain company whose customers include grocery stores in the US and UK as well as Fortune 500 companies said it was hit by a ransomware attack this weekend.

The hackers attacked Blue Yonder – an Arizona-based software company acquired by Panasonic in 2021 – affecting a private cloud computing service the company offers to some customers, but not the company’s public cloud environment .

A spokesman for Blue Yonder did not answer questions about which customers were affected, including in the United States. But messages Blue Yonder sent to customers reviewed by CNN show the company is making efforts to work with U.S.-based customers to mitigate any impact on customers.

“On November 21, 2024, Blue Yonder experienced disruptions in its hosted managed services environment that were determined to be due to a ransomware incident,” Blue Yonder said in an initial public statement on Friday. In an updated statement Saturday, the company said it was making “steady progress” toward recovery but did not yet have a “recovery timeline.”

The immediate impact was felt in the United Kingdom, where two of the four largest grocery chains told CNN they were taking measures to deal with the outage.

“We have returned to a backup process, but the outage has resulted in the smooth flow of goods to our stores being impacted,” said a spokesman for Morrisons, which operates almost 500 grocery stores across the United Kingdom.

A spokesman for Sainsbury’s, another major British grocery chain, told CNN it had “emergency processes” in place to deal with Blue Yonder’s outage.

Some of the largest U.S. grocery chains use Blue Yonder, including Albertsons — the parent company of chains like Safeway and Jewel-Osco — and Kroger, the parent company of chains like Ralphs and Fred Meyer. Albertsons and Kroger did not immediately respond to CNN’s request for comment

Other major companies that have used Blue Yonder products or services include Procter & Gamble and Anheuser-Busch, according to Blue Yonder press releases. Neither company responded to requests for comment.