Just plain, simple Alex 
Never in my life would I expected a cybersecurity issue (at least not a non-food safety issue) to result in a food recall
Add this to your risk assessments
Ben Stokman@PlainSimpleAlex and why is the best action recalling the boxes, not like, fixing the URL. Do they not own the domain or something?