Ahold Delhaize Shuts Down IT Systems Amidst Unspecified Cybersecurity Incident
Food retail giant Ahold Delhaize has taken significant IT systems offline as a precautionary measure following the detection of a security incident, impacting customer services across its various brands.
Food retail conglomerate Ahold Delhaize confirmed on October 12, 2026, that it has taken certain IT systems offline after identifying a security issue within its network. The company, which operates numerous grocery and retail brands globally, stated that these shutdowns are protective measures implemented by its teams to limit the potential impact of the incident. While physical stores remain operational and continue to serve customers, the disruption has affected several digital services and customer-facing platforms.
The immediate consequences of the incident have been felt by customers of Ahold Delhaize's well-known brands. In the Netherlands, the website, app, and home delivery service for Albert Heijn, a major supermarket chain, became unavailable. Sister brands Etos (a health and beauty retailer) and Gall & Gall (a beverage retailer) also experienced disruptions, with their customer service and logistics systems reportedly offline. Although Albert Heijn stores continued to function, personal discounts and app-linked savings schemes were temporarily paused, and electronic shelf labels displayed outdated pricing information, potentially leading to discrepancies at checkout.
The impact of the security incident extends beyond the Netherlands. Reports indicate that websites belonging to U.S. subsidiaries of Ahold Delhaize, including Food Lion, The Giant Co., Giant Food, Hannaford, and Stop & Shop, were also unavailable. Despite these widespread digital service interruptions, Ahold Delhaize has reiterated that its physical stores remain operational. The company has apologized for any inconvenience caused to its customers and partners.
Crucially, Ahold Delhaize has not yet disclosed the specific nature of the security incident. The company's initial statements have not identified a threat actor, explained the entry point, or confirmed whether the incident involves ransomware, data theft, or other malicious activities. This lack of detail means the full scope and cause of the disruption remain unresolved, with the system shutdowns being characterized as a precaution rather than a confirmed response to a specific type of attack.
This incident echoes similar events that have affected other major retail and food distribution companies. In June 2025, United Natural Foods (UNFI) took its systems offline following a cyberattack that hampered its ability to fulfill and deliver customer orders. More recently, in May 2025, Victoria's Secret experienced a security incident that led to its website being taken offline, while its physical stores continued to operate. These past events highlight the vulnerability of large retail operations to cyber threats and the significant operational and customer-facing impacts they can entail.
For consumers of Ahold Delhaize brands, the primary impact currently is the reduced accessibility of online shopping and related digital services. The company has provided no timeline for the restoration of these services, nor has it released findings regarding potential data exposure. The ongoing investigation and the subsequent recovery efforts are therefore still in their early stages, leaving both the resolution of the technical issues and the security implications uncertain.
The situation underscores the critical importance of robust cybersecurity measures for large, interconnected retail organizations. The reliance on digital platforms for sales, logistics, and customer engagement means that even a temporary disruption can have far-reaching consequences. As Ahold Delhaize works to address the incident, the focus will be on restoring services, understanding the root cause, and implementing measures to prevent future occurrences.
The new article provides additional details on the Ahold Delhaize incident, confirming that the security issue has impacted stores and distribution centers across the Netherlands and Belgium, including brands like Albert Heijn, Etos, and Gall & Gall. It also notes that the company's websites and apps remain offline, and employees at its US Stop & Shop chain are experiencing issues accessing schedules and paystubs, indicating a broader operational impact than initially reported.
This new report from GovInfoSecurity provides further details on the cyber incident affecting Ahold Delhaize, specifically noting that experts suspect ransomware is involved. It also highlights that the incident began a week prior to disclosure and impacted various European brands including Albert Heijn, Etos, and Gall & Gall, in addition to U.S. operations. The article also mentions a previous ransomware attack on Ahold Delhaize's U.S. network in November 2024.