Incident Response
Ahold Delhaize Disconnects Systems After Cyberattack, Stores Remain Open
Ahold Delhaize took some systems offline after a cyberattack, affecting deliveries and online orders. The company says stores remain open and there is no evidence of stolen customer data.
Ross Grant3 min read
The short version
Ahold Delhaize, which owns supermarkets like Albert Heijn and Delhaize, was hit by a cyberattack. The company took some systems offline to protect them, which affected deliveries and online orders. Stores are still open, and there is no sign that customer data was stolen. The company is investigating and working to restore services.
What happened?
Ahold Delhaize, a major grocery group, disconnected some of its IT systems after detecting a cyberattack. Stores remain open, but deliveries and online orders were affected in Belgium, the Netherlands, and possibly the US. The company says there is no evidence of data theft.
What Ahold Delhaize Has Said
Ahold Delhaize, the Dutch-Belgian grocery group behind brands like Albert Heijn and Delhaize, has confirmed it disconnected some of its IT systems after detecting a cyberattack. The company posted a short notice on its website, saying it found a security issue in its network and took action to contain it. According to Ahold Delhaize, stores remain open and customers can still shop in person.
The company has not shared technical details about the attack. It says its security teams are working to investigate and restore affected systems. There is no timeline yet for when all systems will be back online. The company has notified authorities and stakeholders, and says there is no evidence that customer or employee data has been stolen.SecurityWeek (opens in a new tab)
Impact on Customers and Operations
While physical stores are open, the incident has affected deliveries and online orders for Albert Heijn and Delhaize customers in Belgium and the Netherlands. Some stores in the US were also affected, though details are limited. The impact varies by brand and location, and each local team is working to minimise disruption.
Ahold Delhaize says it is starting a controlled re-launch of some systems as it makes progress in its investigation. The company has not said when normal service will resume for online customers.
Previous Incidents
This is not the first time Ahold Delhaize has faced a cyberattack. In November 2024, the company was hit by an attack that affected several of its US supermarket brands, including Giant Food, Hannaford, Food Lion, The Giant Company, and Stop & Shop. In April 2025, the INC Ransom group claimed responsibility, and Ahold Delhaize confirmed that data had been stolen. By June 2025, the company notified US regulators that over 2.2 million people’s personal information had been compromised in that earlier attack.
It is not clear if the current incident is related to a recent attack that disrupted refrigerators and freezers in supermarkets across Europe. Ahold Delhaize has not confirmed any connection.
What Happens Next
Ahold Delhaize says its teams are working urgently to investigate the incident and restore systems safely. Customers should expect some delays with deliveries and online orders until the company completes its recovery process. The company has not provided further details about the nature of the attack or the systems affected.
For now, there is no evidence that personal data has been stolen in this incident. Customers who use online services should watch for updates from the company and be alert for any suspicious emails or messages, just in case.
What You Should Do
If you are a customer of any Ahold Delhaize brand, you do not need to take immediate action. However, it is always a good idea to use strong, unique passwords for online accounts and to be cautious of phishing emails that may try to take advantage of news about the incident. If the company finds that data has been compromised, it will likely notify affected customers as required by law.
Claimed vs confirmed
- Confirmed
Ahold Delhaize says there is no evidence that customer or associate data has been stolen.
The company stated this in its notice and to SecurityWeek.
- Unconfirmed
The incident is related to the recent attack on supermarket refrigerators and freezers in Europe.
Ahold Delhaize has not confirmed any connection.
The impact
- Money
- No financial impact has been disclosed. Under EU GDPR, fines for data breaches can reach €20 million or 4% of global turnover, but the company says there is no evidence of data theft at this time.
- Reputation
- Ahold Delhaize’s reputation may be affected by service disruptions and the recurrence of cyberattacks. The company’s quick action to disconnect systems may help limit damage.
- Customers
- Customers may face delays with deliveries and online orders, but in-store shopping continues. There is no evidence yet that customer data was stolen, but customers should stay alert for updates.
Why it matters
Ahold Delhaize is a major supermarket group serving millions of people. Disruptions to its systems can affect food deliveries and online shopping for many customers. The company’s response shows how large organisations handle cyberattacks to protect their networks and customer data.
How does it work?
Ahold Delhaize has not disclosed details about the attack method. The company says it found a security issue in its network and took systems offline as a precaution. This is a common incident response step to prevent attackers from spreading or stealing data.
Key points
- Ahold Delhaize disconnected systems after a cyberattack to contain the threat.
- Deliveries and online orders were disrupted, but stores remain open.
- There is no evidence yet that customer or employee data was stolen.
- The company is working with authorities and restoring systems gradually.
- Ahold Delhaize has faced similar incidents in the past, including a major data breach in 2024-2025.
Sources
SecurityWeek
Reference
