Key points
- Ahold Delhaize took systems offline on October 12, 2026, to mitigate a network security incident.
- Customer-facing apps and employee scheduling tools at brands like Stop & Shop and Albert Heijn are disrupted.
- Physical stores remain open, though checkout pricing and order fulfillment may be impacted by the outage.
Ahold Delhaize disabled portions of its network infrastructure on October 12, 2026, following the detection of a cybersecurity incident. The multinational retailer, which operates more than 9,400 stores across Europe, the United States, and Indonesia, confirmed it was taking protective measures to contain the issue. The company stated that its teams were actively assessing the scope of the breach while ensuring physical locations remained open for shoppers.
How it unfolded
- On October 12, 2026, Ahold Delhaize issued a statement confirming a security issue within its network and the subsequent offline status of certain systems.
- The company described the shutdown as a necessary step to protect infrastructure, apologizing for inconvenience to partners and customers without specifying the attack vector.
- Internal communications and external service disruptions were reported shortly after the initial announcement, affecting multiple regional brands under the corporate umbrella.
Who is affected
Employees at U.S. chains such as Stop & Shop reported difficulties accessing pay stubs and work schedules, according to BleepingComputer. In the Netherlands, customers using Albert Heijn, Etos, and Gall & Gall found their websites, mobile apps, and customer service platforms unavailable. An internal memo shared by Food Lion staff indicated that some locations might be unable to process, stage, or hand off online orders, signaling potential fulfillment delays.
The outage has created operational friction for shoppers relying on digital tools. According to Cyber Security News, Albert Heijn paused personal discounts and app-linked savings schemes. Electronic shelf labels continued to display prices from the previous week, which could result in discrepancies at checkout registers. While checkout systems remained functional, the lack of real-time pricing data may cause confusion for customers expecting current promotional rates.
International operations also faced connectivity losses. Progressive Grocer reported that websites for U.S. brands including Food Lion, The Giant Co., Giant Food, Hannaford, and Stop & Shop went offline. Despite these digital interruptions, Ahold Delhaize maintained that its physical stores were operational and serving customers. The company has not provided details on whether corporate networks or specific store endpoints were compromised.
This event marks the second major security breach for Ahold Delhaize in recent years. In November 2024, a ransomware attack attributed to the group INC Ransom compromised the personal, financial, and health information of over 2.2 million individuals. That incident primarily impacted U.S. systems. The current outage does not yet have a confirmed attribution or evidence of data theft, leaving the full scope unresolved.
What happens next
Ahold Delhaize has not confirmed whether ransomware was involved or if data was exfiltrated in this latest incident. The company’s spokesperson was unavailable for comment regarding the specific systems affected or whether encryption occurred, according to BleepingComputer. The initial disclosure did not name an attacker or identify an entry point.
The retailer is focusing on mitigation and assessment. Until the company provides further updates, the status of customer data and the duration of the outage remain uncertain. The precautionary nature of the shutdown suggests the organization is prioritizing containment over immediate restoration of all digital services.
What to do and how to stay safe: Ahold Delhaize
- Monitor official channels from affected retailers for updates on service restoration and potential data exposure.
- Review account statements for unauthorized transactions if you recently used compromised apps or websites.
- Enable multi-factor authentication on retail accounts to reduce the risk of credential theft during breaches.
- Check for password resets if you use the same credentials across multiple services linked to the affected brands.
Step-by-step guide: Mobile Device Security for Small Business: Control Without Cost
General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did Ahold Delhaize confirm that customer data was stolen in this incident?
No, the company has not confirmed data theft or identified an attacker as of the initial reports.
Are physical stores still open during this cybersecurity incident?
Yes, Ahold Delhaize stated that its physical stores remain open and are serving customers.
Which specific brands are experiencing digital service disruptions?
Disruptions affect Albert Heijn, Etos, Gall & Gall, Stop & Shop, Food Lion, Giant Food, and Hannaford.
