A cyberattack at a big equipment supplier is slowing deliveries to restaurants and institutional kitchens across North America. On Oct. 21, 2026, Germany-based TAKKT AG said in an ad hoc disclosure that it had been "the target of a cyber attack on parts of its IT systems," hitting its Foodservices division in North America and its Industrial & Packaging division in Europe.
TAKKT Foodservices is based in Harrison, Ohio, near Cincinnati, and includes Hubert Company, a foodservice and food-retail equipment supplier, and Central Restaurant Products, a commercial kitchen equipment distributor, DysruptionHub reported. The division sells to restaurants, food retailers, and institutional kitchens, including those in schools and universities.
What TAKKT has confirmed, and what it hasn't
Confirmed by TAKKT: As a precaution, the affected systems "have partly been taken offline." As a result, "order processing, customer service and deliveries are currently significantly restricted." Orders can still be placed through the online shop and other channels, but processing and delivery are limited. A task force is working with external cybersecurity experts and IT forensic specialists. TAKKT said it could not yet assess whether any damage has occurred, how much, or when systems will be fully operational again.
Not confirmed: TAKKT hasn't named an attacker, said how the attackers got in, or said whether ransomware or data theft was involved. It hasn't said whether both Hubert and Central Restaurant Products are affected, or how many orders are delayed. As of Friday morning we found no newer TAKKT update, and no new ransomware leak-site listing for TAKKT, Hubert, or Central Restaurant Products on Ransomware.live since the attack was disclosed. When we checked Friday morning, hubert.com showed a "Down for Maintenance" page. TAKKT hasn't said whether that is connected. There's no confirmed encryption, no confirmed customer-data exposure, and no word on any payment, so don't assume any of those.
Why it matters to restaurants, manufacturers, and distributors
Most small businesses will never be the headline in a story like this. They're the customer waiting on the delivery. A restaurant opening a second location, a school kitchen replacing a walk-in shelving unit, or a plant waiting on packaging and shop equipment all lean on a few suppliers they've never had to think twice about.
A supplier outage brings two risks. The first is the plain one: orders, quotes, and deliveries stall, and nobody at the supplier can see your account. The second is fraud. When a known vendor is in the news and its systems are down, criminals send look-alike emails: "our systems are down, please pay this invoice to our new account," "confirm your order by logging in here," or a fake customer-service rep asking for a card number to "re-process" an order. Those messages work because the story behind them is real.
Clear takeaway
If Hubert, Central Restaurant Products, or any other TAKKT business is on your vendor list, plan around slower orders and treat every "new bank details" or "log in to confirm your order" message as a scam until you've confirmed it by phone. Then use the week to make the same plan for your other critical suppliers.
Actions to take this week
- List your critical suppliers. For each one, write down what you'd do if it couldn't ship for two weeks: a second source, safety stock, or a later opening date you can live with.
- Confirm open orders the slow way. Call your rep at a number you already have, and keep your own record of PO numbers, quantities, and promised dates so you can reconcile when the supplier's systems come back.
- Lock down payment changes. No change to a vendor's bank details or remit-to address without a call-back to a known number and a second person signing off. This is the control that stops most supplier-themed fraud.
- Don't log in from links. Reach supplier portals from a saved bookmark or by typing the address, and turn on MFA wherever the portal offers it.
- Watch for the follow-up. If TAKKT later reports that customer data was involved, change any password you've used on its portals and tighten fraud checks on accounts linked to that vendor.
- Turn it around on yourself. Ask what your own customers would do if your ordering, quoting, or shipping system went dark for a week, and make sure you have an offline order process and a restorable backup.
Brotherly Technology helps restaurants, manufacturers, distributors, and professional offices across Rome, Northwest Georgia, Atlanta, Chattanooga, and the Southeast plan for supplier outages and shut down vendor-payment fraud. If you'd like help building a one-page supplier continuity plan and a payment-change policy your team will actually follow, give us a call.
Sources:
- TAKKT AG ad hoc disclosure: "Cyber attack at TAKKT AG" (Stuttgart, Oct. 21, 2026, via EQS News). Source for all company-confirmed facts and quotes.
- DysruptionHub: "TAKKT cyberattack restricts foodservice orders and deliveries in North America" (Oct. 21, 2026). Source for the Harrison, Ohio location, the Hubert and Central Restaurant Products brands, and the customer base.
- Ransomware.live victim data, checked Oct. 23, 2026: no listing for TAKKT, Hubert, or Central Restaurant Products since Oct. 21.