Ahold Delhaize Confirms Cyberattack Disrupting US and European Operations
Grocery giant takes IT systems offline following malicious security breach across global brands.
1Proactive System Shutdown
Dutch grocery giant Ahold Delhaize initiated a proactive shutdown of IT systems following a cyberattack disclosed on October 12. This precautionary measure impacted websites and mobile applications across its US and European brands. CEO Frans Muller confirmed the decision was necessary to protect network integrity while security teams mitigate the ongoing issue.
2Operational Impact Assessment
While digital platforms faced significant downtime, physical store locations remain fully operational for customers. The company reported that Albert Heijn’s digital services are already restored. Meanwhile, American brands like Food Lion, Giant Food, and Stop & Shop expect e-commerce functionality to resume gradually in the coming days as systems are brought back online.
3Data Security Status
Current internal investigations have not uncovered evidence suggesting that sensitive customer, associate, or partner data was stolen during this specific incident. The company is actively conducting a forensic review to confirm the scope of the breach. No confirmation regarding the compromise of personal or financial information has been provided by the retailer yet.
4Official Reporting Procedures
Ahold Delhaize formally notified the Dutch National Cyber Security Centre regarding the digital intruders last week. On Monday, the organization filed an official report with the Dutch police to document the malicious actions. These steps align with standard corporate protocols for managing large-scale security breaches involving multinational retail infrastructure and sensitive network access.
5Context of Recent Attacks
The company did not comment on potential links to recent cyberattacks targeting refrigeration controllers at French supermarkets. Those incidents, beginning October 11, reportedly caused temperatures to spike to 122°F, resulting in food spoilage and fires. Investigators are currently evaluating whether these regional events share a common threat actor or technical attack vector.
6History of Security Breaches
This incident marks the second major cyberattack against Ahold Delhaize within a two-year period. A previous digital break-in occurred in November 2024, which severely disrupted operations at Stop & Shop and Food Lion. That specific event caused significant delays in prescription fulfillment and logistics, impacting the daily operations of multiple retail banners across the organization.
7Previous Data Exposure
During the November 2024 breach, the INC Ransom group claimed responsibility and leaked internal documents. Ahold Delhaize later confirmed that the personal, financial, and health data of more than 2.2 million individuals had been compromised. This historical context highlights the recurring security challenges faced by the multinational retailer in protecting its vast digital ecosystem.
8Future Operational Outlook
The company is prioritizing the restoration of home delivery services, which are expected to resume by Friday. Management continues to monitor the situation across central and southeastern Europe, where most websites and apps are currently functional. Future updates will depend on the ongoing forensic investigation and the successful recovery of all impacted American e-commerce platforms.