# Ahold Delhaize Confirms Cyberattack Disrupting US and European Operations

Grocery giant takes IT systems offline following malicious security breach across global brands.

- **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1)
- **Published:** 2026-10-19
- **Topic:** [Business](https://brifing.si/c/business)
- **Original article:** <https://www.theregister.com/security/2026/10/19/grocery-giant-ahold-delhaize-confirms-cyberattack-forced-us-and-european-systems-offline/5303970>
- **On Brifing:** https://brifing.si/s/63df8d37-fd8d-4bd7-96ea-461c5266d666

## Proactive System Shutdown

Dutch grocery giant Ahold Delhaize initiated a proactive shutdown of IT systems following a cyberattack disclosed on October 12. This precautionary measure impacted websites and mobile applications across its US and European brands. CEO Frans Muller confirmed the decision was necessary to protect network integrity while security teams mitigate the ongoing issue.

## Operational Impact Assessment

While digital platforms faced significant downtime, physical store locations remain fully operational for customers. The company reported that Albert Heijn’s digital services are already restored. Meanwhile, American brands like Food Lion, Giant Food, and Stop & Shop expect e-commerce functionality to resume gradually in the coming days as systems are brought back online.

## Data Security Status

Current internal investigations have not uncovered evidence suggesting that sensitive customer, associate, or partner data was stolen during this specific incident. The company is actively conducting a forensic review to confirm the scope of the breach. No confirmation regarding the compromise of personal or financial information has been provided by the retailer yet.

## Official Reporting Procedures

Ahold Delhaize formally notified the Dutch National Cyber Security Centre regarding the digital intruders last week. On Monday, the organization filed an official report with the Dutch police to document the malicious actions. These steps align with standard corporate protocols for managing large-scale security breaches involving multinational retail infrastructure and sensitive network access.

## Context of Recent Attacks

The company did not comment on potential links to recent cyberattacks targeting refrigeration controllers at French supermarkets. Those incidents, beginning October 11, reportedly caused temperatures to spike to 122°F, resulting in food spoilage and fires. Investigators are currently evaluating whether these regional events share a common threat actor or technical attack vector.

## History of Security Breaches

This incident marks the second major cyberattack against Ahold Delhaize within a two-year period. A previous digital break-in occurred in November 2024, which severely disrupted operations at Stop & Shop and Food Lion. That specific event caused significant delays in prescription fulfillment and logistics, impacting the daily operations of multiple retail banners across the organization.

## Previous Data Exposure

During the November 2024 breach, the INC Ransom group claimed responsibility and leaked internal documents. Ahold Delhaize later confirmed that the personal, financial, and health data of more than 2.2 million individuals had been compromised. This historical context highlights the recurring security challenges faced by the multinational retailer in protecting its vast digital ecosystem.

## Future Operational Outlook

The company is prioritizing the restoration of home delivery services, which are expected to resume by Friday. Management continues to monitor the situation across central and southeastern Europe, where most websites and apps are currently functional. Future updates will depend on the ongoing forensic investigation and the successful recovery of all impacted American e-commerce platforms.

## Sources covering this story

- https://www.theregister.com/security/2026/10/19/grocery-giant-ahold-delhaize-confirms-cyberattack-forced-us-and-european-systems-offline/5303970 — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._