Lamb Weston discloses data breach affecting 7,175 people, eight months after incident

Lamb Weston Holdings Inc., a global producer and distributor of frozen potato products headquartered in Eagle, Idaho, disclosed a data breach that affected 7,175 people in the United States.

The company said unauthorized activity began Jan. 9, 2026, and continued until Jan. 15, 2026, when Lamb Weston discovered it. The breach was disclosed to the Oregon attorney general’s office on Sept. 29, 2026, the same day Lamb Weston began notifying affected consumers, roughly eight months after the incident occurred.

Lamb Weston has not publicly disclosed the specific types of information compromised, saying only that the exposed data could have included names, dates of birth, addresses, Social Security numbers or financial information.

The company advised individuals who believe they may have been affected but have not received a notification letter to contact Lamb Weston directly. Those who did receive a letter were told to review it for details about how they were impacted and to consider enrolling in any credit or identity monitoring services the company offers. Lamb Weston recommended that affected individuals remain vigilant and review their accounts for suspicious activity.

Lamb Weston, founded in 1950, produces French fries and other potato-based foods. Shamis & Gentile, a law firm specializing in data breach class actions, said it is investigating the Lamb Weston breach.