Ahold Delhaize Confirms Cyberattack Disrupting Global Retail Operations
Grocery giant takes IT systems offline across US and Europe following malicious network intrusion.
1Proactive System Shutdown Strategy
Ahold Delhaize confirmed a cyberattack forced the company to proactively take IT systems offline across its US and European brands. CEO Frans Muller stated this precautionary measure was essential to protect network integrity. The incident, first disclosed on October 12, impacted websites and mobile applications, disrupting digital operations for major retail chains.
2Operational Status and Recovery
While digital platforms faced outages, physical stores remained open throughout the incident. Albert Heijn’s digital services have already resumed, and the company expects home deliveries to restart by Friday. E-commerce services for American brands like Food Lion, Giant Food, and Stop Shop are undergoing restoration and should be fully operational in coming days.
3Data Security Investigation Findings
The company’s ongoing investigation has not uncovered evidence suggesting that sensitive customer, associate, or partner data was stolen during this specific intrusion. Ahold Delhaize has formally notified the Dutch National Cyber Security Centre about the digital intruders and filed an official report with the Dutch police to support the ongoing criminal investigation process.
4Context of Recent Industry Attacks
The company did not confirm if this incident relates to recent attacks on refrigeration controllers at French supermarkets. Those separate attacks, beginning October 11, reportedly pushed temperatures to 122°F, causing food spoilage and fires. Retailers are increasingly facing complex threats targeting both digital infrastructure and physical operational technology systems within their supply chains.
5History of Security Breaches
This event marks the second major cyberattack against Ahold Delhaize in two years. A November 2024 breach previously disrupted operations, causing prescription fulfillment issues at Stop Shop and delivery delays at Food Lion. That earlier incident involved the INC Ransom group, which leaked internal documents and compromised data for 2.2 million individuals.
6Scope of Compromised Information
During the November 2024 incident, the retailer confirmed that personal, financial, and health details of over 2.2 million people were compromised. The current investigation remains focused on determining the extent of the recent intrusion. Management is prioritizing the stabilization of digital services while ensuring that no similar data exfiltration has occurred this time.
7Supply Chain and Delivery Impact
The disruption has specifically impacted e-commerce and home delivery services across the company's diverse portfolio. Brands such as Hannaford, Martin’s, and Stop Shop are working to restore full functionality. The company is managing these outages by prioritizing the recovery of customer-facing applications to minimize long-term impact on consumer shopping habits and logistics.
8Future Resilience and Monitoring
Ahold Delhaize continues to work with security teams to mitigate the effects of the malicious actions. The company has not provided further details regarding the specific nature of the threat actors involved. Future efforts will likely focus on hardening network defenses to prevent recurring vulnerabilities that have plagued the organization over the past two years.