Key points
- Ahold Delhaize proactively disabled IT systems across the US and Europe after detecting malicious activity on its network.
- Physical supermarket locations remain open, and investigators have found no evidence that sensitive customer data was stolen.
- Digital services for brands like Albert Heijn and Food Lion are gradually returning, with full restoration expected in the coming days.
Dutch grocery retailer Ahold Delhaize shut down its digital systems across the United States and Europe to contain a cyberattack, disrupting online shopping for many of its major brands. The company confirmed that external attackers caused the security issue, prompting the precautionary shutdown to protect its network infrastructure.
How it unfolded
- On October 12, Ahold Delhaize disclosed a security issue within its network and took some IT systems offline to mitigate the problem.
- On Monday, the company confirmed that malicious actors caused the incident and that taking systems offline was a necessary precautionary measure.
- The company notified the Dutch National Cyber Security Centre last week and filed a report with Dutch police on Monday.
Who is affected
The shutdown impacted most of Ahold Delhaize’s brands across Europe and the United States, including US chains Food Lion, Giant Food, Stop & Shop, Hannaford, and Martin’s. According to The Register, the company did not immediately respond to questions about whether this incident was linked to attacks on French supermarket refrigeration controllers that began on October 11.
Physical stores remain open for all affected brands. Frans Muller, president and CEO of Ahold Delhaize, stated that the investigation to date confirms taking systems offline was the right decision. The company reported that investigators have not uncovered any evidence suggesting that miscreants stole sensitive customer, associate, or partner data during the incident.
What happens next
Albert Heijn’s website and app are back online, and the company expects home deliveries to resume on Friday. Belgian e-commerce services are fully operational. E-commerce services for American brands are expected to work in the coming days, while the majority of websites and apps for brands serving central and southeastern Europe, including Etos and Gall & Gall, are also up and running.
The background in plain language
When organizations detect unauthorized access, they often disconnect affected systems from the internet. This isolation prevents attackers from moving deeper into the network or exfiltrating data. While this causes service interruptions for customers, it is a standard containment strategy. Teams usually verify the scope of the breach before restoring services. Customers should monitor official channels for updates on when digital services will return to normal operation.
Background: Unauthorized access
Yes, they are different. Unauthorized access means entering a system without permission. Unauthorized use means entering with permission but acting beyond allowed boundaries. Access violations trigger perimeter alerts. Use violations require behavioral analysis to detect, as the actor already possesses valid credentials and expected network presence.
Read the full guide: Difference Between Unauthorized Access and Unauthorized Use Explained
What to do and how to stay safe: Ahold Delhaize
- Check the official websites or apps of your local grocery chain to see if online ordering is available, as services may be restored in phases.
- Verify that any pending orders were cancelled or processed correctly, and contact customer support if you notice discrepancies in your account.
- Monitor your bank and credit card statements for any unauthorized transactions, even though the company reports no data theft, as a precaution.
- Use alternative shopping methods, such as visiting physical stores, which remain open, if digital services are still unavailable in your region.
Step-by-step guide: Mobile Device Security for Small Business: Control Without Cost
General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did hackers steal customer data from Ahold Delhaize?
No, the company’s investigation has not uncovered any evidence that sensitive customer, associate, or partner data was stolen.
Are Ahold Delhaize physical stores open?
Yes, all physical stores remain open despite the cyberattack and the shutdown of certain IT systems.
When will online shopping work again for US brands?
E-commerce services for American brands like Food Lion and Stop & Shop are expected to work in the coming days.
