Ahold Delhaize confirms cyberattack caused service outages across US and Europe
The Dutch grocery retailer took systems offline after detecting malicious activity, disrupting online services while physical stores remained open.
Key points
- Ahold Delhaize confirmed malicious actors caused the outage, filing a police report in the Netherlands on Monday.
- Online services for U.S. brands like Food Lion and Stop & Shop remain down, while Dutch and Belgian sites are recovering.
- The company stated there is currently no evidence that sensitive customer, employee, or partner data was stolen.
Ahold Delhaize confirmed on Monday that malicious actors were responsible for the cyber incident that forced the Dutch multinational grocery retailer to take systems offline. The company stated that the suspicious activity detected in its IT systems last week was indeed caused by external attackers, prompting a police report filed in the Netherlands.
The retailer disclosed that the incident disrupted online services across the United States, the Netherlands, and Belgium. While physical stores remained open for shoppers on both sides of the Atlantic, digital operations were significantly impacted. The company emphasized that it is restoring services in phases and has not yet released specific technical details about the attack vector or whether a ransom was involved.
Context and Investigation
Ahold Delhaize notified Dutch cybersecurity authorities within twenty-four hours of detecting the initial incident. The company is cooperating with law enforcement and has cautioned that the investigation remains ongoing. Executive leadership has declined to share further operational details, stating that doing so could compromise security measures or interfere with response efforts.
Chief Executive Officer Frans Muller issued an apology for the disruption, describing the decision to take systems offline as a necessary precaution. He acknowledged the inconvenience caused to customers while attributing the incident to the malicious actions of others. The company maintains that it is prioritizing the safety of its systems and the integrity of its data during this recovery period.
Impact on Brands and Services
The outage affected multiple prominent grocery brands under the Ahold Delhaize umbrella. In the United States, online shopping services for Food Lion and Stop & Shop are not yet functional. The company expects these services to resume in the coming days, though no specific timeline was provided for full restoration of all U.S. digital platforms.
In Europe, the recovery progress varies by region. Websites and apps for Dutch brands Albert Heijn, Etos, and Gall & Gall are back online. However, Albert Heijn home deliveries are not expected to resume until Friday. E-commerce services have been fully restored in Belgium and Central and Southeastern Europe, allowing shoppers in those regions to resume normal online activities.
The company stated it has no evidence that sensitive customer, employee, or partner data was stolen during this incident. This stands in contrast to a previous cyberattack in 2024, which resulted in the theft of information belonging to more than 2.2 million people. That earlier incident caused issues at prominent supermarkets across the U.S., highlighting the recurring threat landscape for large retail operators.
What should you do?
Security professionals and affected customers should monitor official channels for updates on service restoration. Users should verify the status of their orders through alternative communication methods if online portals remain inaccessible. Organizations should review their own incident response plans to ensure they can handle similar supply chain disruptions.
What to do and how to stay safe: Ahold Delhaize
- Monitor official company announcements for updates on service restoration and data integrity.
- Verify order statuses through alternative communication channels if online portals are inaccessible.
- Review transaction records for any unauthorized activity, though no data theft has been confirmed.
- Ensure personal devices are updated with the latest security patches to reduce exposure to related threats.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Was customer data stolen in the Ahold Delhaize cyberattack?
The company stated there is currently no evidence that sensitive customer, employee, or partner data was stolen.
Are Ahold Delhaize physical stores open during the outage?
Yes, the company confirmed that physical stores remained open while online services were disrupted.
When will U.S. online shopping services resume?
Online shopping for U.S. brands is expected to resume in the coming days, but no specific date was given.
