Ahold Delhaize Takes Systems Offline After Cyberattack, Disrupting U.S. and European Retail Operations

Key points

• Ahold Delhaize issued a press release on October 12, 2026, confirming a 'security issue within its network' and stating that some systems were taken offline to protect infrastructure.
• The company serves approximately 60 million customers weekly across 9,400 stores in Europe, the U.S., and Indonesia, with 2024 net sales exceeding $104 billion.
• Digital disruptions include inaccessible websites and apps for Albert Heijn, Etos, and Gall & Gall in the Netherlands, as well as U.S. brands like Food Lion, Stop & Shop, Giant Food, and Hannaford.
• Employees at Stop & Shop reported issues accessing schedules and pay stubs, while an internal memo to Food Lion staff described the event as an IT outage affecting order staging and handoffs.
• This incident follows a November 2024 ransomware attack by the group INC Ransom, which compromised personal, financial, and health data of over 2.2 million individuals in the U.S. division.

Background

The grocery sector has faced a surge in cyber threats recently. On October 12, 2026, a coordinated attack disrupted refrigeration systems in French supermarkets, causing significant food losses. Earlier in 2026, industry leaders warned that AI-enabled cyberattacks could arrive within months, urging organizations to prioritize defensive measures. Ahold Delhaize’s 2024 breach, which exposed data for 2.2 million people, highlighted the vulnerability of large retail networks to ransomware groups like INC Ransom.

How outlets are covering it

BleepingComputer and Progressive Grocer emphasize the operational impact on U.S. and European digital platforms, noting that while stores remain open, online services and employee tools are down. The Asbury Park Press focuses specifically on the local impact for Stop & Shop customers in the U.S. Ahold Delhaize’s official statement frames the event as a precautionary measure to protect infrastructure, apologizing for inconvenience but providing no timeline for restoration. Progressive Grocer contextualizes the incident within a broader trend of grocery retailers facing cyber threats, citing recent breaches at Loblaw and UNFI, while BleepingComputer highlights the recurrence of major incidents at Ahold Delhaize within two years.

Why it matters

The disruption affects a major global retailer with nearly 400,000 employees and $104 billion in annual sales, impacting consumer access to digital services and employee operations. The recurrence of significant cyber incidents at Ahold Delhaize underscores the persistent risks to large retail infrastructure and the potential for widespread operational and data security challenges in the grocery sector.

What to watch

Ahold Delhaize is currently assessing and mitigating the security issue, with no specific timeline provided for when offline systems will be restored. The company has not disclosed whether data was encrypted or if the incident affected corporate systems globally. Stakeholders should monitor for updates on the scope of the breach and any potential data exposure, as well as the timeline for full digital service restoration.