Ahold Delhaize confirms cyberattack forced US and European grocery systems offline
The Dutch retailer took IT infrastructure offline to contain malicious activity, disrupting digital services while keeping physical stores open across multiple countries.
Key points
- Ahold Delhaize confirmed malicious actors caused the security issue, prompting the shutdown of IT systems.
- Physical stores remain open, but online shopping and apps for brands like Food Lion and Albert Heijn were disrupted.
- The company reported no evidence that sensitive customer, employee, or partner data was stolen during the incident.
Ahold Delhaize, the multinational grocery operator behind chains such as Food Lion and Albert Heijn, confirmed on Monday that a cyberattack forced it to take critical IT systems offline. The Dutch retailer stated that malicious actions by external actors caused the security breach, necessitating a precautionary shutdown of digital services across its US and European operations to protect its network.
The company originally disclosed the incident on October 12, noting it was experiencing a security issue within its network. At that time, security teams began mitigating the problem by taking some systems offline. The Monday confirmation clarified that the shutdown was a proactive measure to contain the threat. Frans Muller, the president and CEO, stated that the investigation so far validates the decision to disconnect systems to ensure safety.
Context and Background
The Register described the event as a second security snafu for the retailer in two years. Ahold Delhaize notified the Dutch National Cyber Security Centre about the intrusion last week and filed a formal report with Dutch police on Monday. The company did not immediately respond to questions about whether the attack was linked to incidents involving refrigeration controllers at French supermarkets beginning October 11.
As Threat Times reported on October 19, the retailer had already confirmed that the cyberattack caused service outages across the US and Europe. The earlier reporting noted that physical stores remained open while online services were disrupted. The current update provides more detail on the nature of the threat, confirming it was caused by malicious actions, and outlines the gradual restoration of digital services.
Who Is Affected
The shutdown affected most of Ahold Delhaize’s brands across Europe and the United States. However, all physical grocery stores remained open for business throughout the incident. The company stated that the investigation has not uncovered any evidence suggesting that hackers stole sensitive data belonging to customers, associates, or partners. This lack of evidence regarding data exfiltration is a key finding in the current stage of the investigation.
Digital services are gradually returning to normal. Albert Heijn’s website and app are back online, with home deliveries expected to resume on Friday. Belgian e-commerce platforms are fully operational. For US brands, including Food Lion, Giant Food, Martin’s, Hannaford, and Stop & Shop, e-commerce services are expected to function in the coming days. Websites for Etos and Gall & Gall are also up and running, along with most digital services in central and southeastern Europe.
What should you do?
Customers should monitor official channels from their local grocery chain for updates on online service availability. Those with pending orders should check for confirmation emails or notifications regarding delivery schedules. If sensitive data was stored in the retailer’s apps, users should review their account settings for any unrecognized activity, though no breach of such data has been confirmed.
What to do and how to stay safe: Ahold Delhaize
- Monitor official communications from your specific grocery brand for updates on online shopping and delivery services.
- Check your email and app notifications for changes to order statuses or delivery windows during the restoration period.
- Review your account history on the retailer’s platform to ensure no unauthorized changes were made while systems were offline.
- Keep your device software updated to protect against potential threats while interacting with restored digital services.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did Ahold Delhaize confirm that customer data was stolen?
No, the company stated that the investigation has not uncovered any evidence suggesting sensitive customer, associate, or partner data was stolen.
Are physical stores still open during the cyberattack?
Yes, all physical stores across the affected regions remain open and operational despite the IT systems being taken offline.
When will US online shopping services return to normal?
E-commerce services for US brands like Food Lion and Stop & Shop are expected to work in the coming days, while Albert Heijn deliveries resume Friday.
