Ahold Delhaize Takes Systems Offline After Cybersecurity Incident
The global retail giant confirmed it is isolating network segments to contain a security issue, while physical stores remain open for customers.
Key points
- Ahold Delhaize took systems offline on October 12, 2026, to mitigate a cybersecurity incident affecting its network.
- Customer-facing digital services for brands like Albert Heijn and Stop & Shop were disrupted, though physical stores remained open.
- This is the second major security event for the company in recent years, following a November 2024 ransomware attack.
Ahold Delhaize confirmed on October 12, 2026, that it was forced to take some systems offline in response to a cybersecurity incident. The multinational food retailer stated that its teams are actively assessing the issue and taking steps to limit its impact on the organization.
The company, based in Zaandam, the Netherlands, described the shutdowns as protective measures rather than a confirmed breach of data. According to Cyber Security News, the firm apologized for any inconvenience caused to customers and partners while emphasizing that protecting infrastructure is a top priority.
Context and Background
Ahold Delhaize operates more than 9,400 local stores across Europe, the United States, and Indonesia, employing nearly 400,000 people. The retailer reported yearly net sales of over $104 billion in 2024, serving around 60 million customers weekly through physical and online channels.
This event marks the second major cybersecurity incident for Ahold Delhaize in recent years. In November 2024, the company suffered a ransomware attack on its U.S. systems, claimed by the group INC Ransom, which resulted in the theft of personal, financial, and health information for over 2.2 million individuals.
The current disclosure does not identify an attacker, explain the entry point, or confirm if ransomware was involved. The initial statement from the company did not specify which systems were taken offline or if data was stolen. That suggests the organization is prioritizing containment over immediate transparency regarding the attack vector.
Who Is Affected
Disruptions have impacted several customer-facing digital services across multiple regions. According to DutchNews, Albert Heijn’s website, app, and home delivery service became unavailable in the Netherlands. Sister brands Etos and Gall & Gall also reported offline customer service and logistics systems.
While Albert Heijn stores remained open with functional checkout systems, personal discounts and app-linked savings schemes were paused. Electronic shelf labels continued to display prices from the previous week’s offers, potentially causing discrepancies at the register for shoppers.
In the United States, Progressive Grocer reported that websites for Food Lion, The Giant Co., Giant Food, Hannaford, and Stop & Shop were unavailable. Internal memos shared by Food Lion employees indicated that stores might be unable to shop, stage, or hand off online orders.
Stop & Shop employees in the U.S. reported trouble accessing their schedules and pay stubs. An Ahold Delhaize spokesperson was not immediately available to comment on whether the incident affected corporate systems globally or if devices were encrypted during the attack.
What should you do?
Security professionals should monitor for further disclosures from Ahold Delhaize regarding the scope of the incident. Customers and partners should expect potential delays in digital services and order fulfillment. Organizations sharing data with the retailer should review their own access logs for unusual activity.
What to do and how to stay safe: Ahold Delhaize
- Monitor official channels from Ahold Delhaize for updates on service restoration and incident scope.
- Avoid entering sensitive credentials into affected apps or websites until services are fully restored.
- Check email and network logs for any unsolicited communications claiming to be from the retailer.
- Once the vendor provides an update, verify if any customer data was compromised before resuming normal online transactions.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are Ahold Delhaize physical stores still open?
Yes, the company confirmed that physical stores remain open and continue serving customers despite the IT disruptions.
Was ransomware involved in this incident?
The company has not confirmed whether ransomware was used or if files were encrypted; the shutdowns are described as protective measures.
Which brands are affected by this outage?
Affected brands include Albert Heijn, Etos, Gall & Gall, Food Lion, Stop & Shop, Giant Food, Hannaford, and The Giant Co.
