Ahold Delhaize restores some services after cyberattack disrupts US and European operations
The Dutch retail giant took systems offline to contain malicious activity, impacting websites and apps across multiple countries while keeping physical stores open.
Key points
- Ahold Delhaize confirmed a cyberattack forced it to take IT infrastructure offline to contain malicious activity.
- Albert Heijn, Etos, and Gall & Gall websites in the Netherlands and Delhaize in Belgium were affected.
- US brand Stop & Shop employees reported issues accessing schedules and pay stubs during the incident.
- No evidence of stolen customer or partner data has been found so far, according to the company.
Ahold Delhaize, a major global food retailer, confirmed that a cyberattack disrupted digital services across its European and United States operations last week. The incident forced the company to take specific IT infrastructure offline to contain the malicious activity, causing significant service interruptions for customers and employees while physical store locations remained open.
The disruption impacted multiple brands under the Ahold Delhaize umbrella, including Albert Heijn, Etos, and Gall & Gall in the Netherlands, as well as Delhaize in Belgium. In the United States, employees at Stop & Shop reported difficulties accessing their work schedules and pay stubs. The company stated that the cybersecurity incident necessitated taking systems offline, which directly caused the service issues experienced by users of its digital platforms.
Service Restoration Status
As of a Monday update, Ahold Delhaize reported that most store websites and apps in Central and Southeastern Europe are back online. The company is still working to restore remaining systems for its European and US brands. Albert Heijn’s website and app are operational, with home deliveries expected to resume on Friday, October 23. Etos and Gall & Gall websites are also available for customers.
In Belgium, e-commerce services are now fully operational. However, e-commerce services for Ahold Delhaize USA brands are expected to return in the coming days. The company did not specify which US brands remain affected or provide a precise timeline for full restoration of all services. The ongoing efforts focus on bringing all digital channels back to normal functionality while ensuring security.
Investigation and Data Security
Ahold Delhaize notified the Dutch National Cyber Security Centre (NCSC) within 24 hours of discovering the malicious activity. The company has continued to provide timely updates to the NCSC, law enforcement, and other relevant regulatory authorities. On Monday, Ahold Delhaize filed a formal police report with the Dutch police to support the ongoing investigation into the breach.
The retail giant stated that its ongoing investigation has not yet found evidence that sensitive customer, associate, or partner data was stolen. The company declined to share further technical details that could interfere with response efforts or compromise security measures. Frans Muller, President and CEO of Ahold Delhaize, apologized for the inconvenience caused by the malicious actions of others, particularly to customers.
What should you do?
Customers who use Ahold Delhaize services should monitor official company channels for updates on service restoration and delivery schedules. Employees of Stop & Shop and other affected brands should follow internal communications regarding access to schedules and pay stubs. Users should remain vigilant for any suspicious activity related to their accounts, although no data theft has been confirmed.
What to do and how to stay safe: Ahold Delhaize
- Check official Ahold Delhaize websites for the latest status on e-commerce and app availability.
- Monitor email and account notifications for any changes to delivery schedules or service outages.
- Report any unusual account activity to the relevant brand’s customer support team immediately.
- Wait for official updates before assuming personal data was compromised, as no evidence of theft exists.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Was any customer data stolen in the Ahold Delhaize cyberattack?
No, the company stated that its ongoing investigation has not found evidence that sensitive customer, associate, or partner data was stolen.
When will US e-commerce services be restored?
Ahold Delhaize expects e-commerce services for its USA brands to come back in the coming days, but did not provide a specific date.
Are physical stores still open during the cyberattack?
Yes, the company confirmed that while digital services were disrupted, physical stores remained open to serve customers across multiple countries.
