Ahold Delhaize Takes Systems Offline Amid Unspecified Cybersecurity Incident

Key points

• Ahold Delhaize confirmed a security issue within its network on October 12, 2026, prompting the company to take certain systems offline as a precautionary measure.
• Websites for U.S. banners Food Lion, The Giant Co., Giant Food, Hannaford, and Stop & Shop, as well as international chain Albert Heijn, are currently down, though physical stores remain open and operational.
• The company stated it is assessing and mitigating the issue but provided no specific details on the nature of the breach or a timeline for system restoration.
• This is the second major security incident for Ahold Delhaize in two years, following a November 2024 cyberattack that exposed personal information for 2.2 million individuals and potentially compromised employment data in the Netherlands.
• The 2024 attack was attributed to the ransomware group INC Ransom, and the company offered two years of credit monitoring to affected individuals.

Background

Ahold Delhaize, headquartered in Zaandam, Netherlands, is one of the world's largest food retail groups, serving approximately 77 million customers weekly across the U.S., Europe, and Indonesia. The company's U.S. division ranks No. 12 on Progressive Grocer's 2026 list of top North American food retailers. Grocery retailers have faced frequent cyber threats, including incidents at Loblaw Cos. Ltd. and United Natural Foods Inc. (UNFI), which took systems offline in June 2025 after detecting unauthorized activity. FBI officials have urged retailers to engage in proactive cybersecurity planning and tabletop exercises to enhance response capabilities.

How outlets are covering it

Progressive Grocer emphasized the broad impact on U.S. and international digital services and highlighted the company's history with cyberattacks, including the 2024 breach. Ahold Delhaize's official statement focused on precautionary measures and protecting infrastructure, without specifying the nature of the security issue. WHP Harrisburg and Asbury Park Press reported on the website outages for Giant and Stop & Shop, respectively, noting that physical stores remained open and that no timeline for restoration was provided. All sources agreed that the incident was under investigation, but only Progressive Grocer provided detailed background on the 2024 breach and industry-wide cyber threats.

Why it matters

The incident disrupts digital services for millions of customers across major grocery brands, potentially affecting online ordering and access to account information. It underscores the ongoing vulnerability of large retail networks to cyber threats and the operational challenges faced by companies in mitigating such incidents. The lack of transparency regarding the nature of the breach and restoration timeline may raise concerns among consumers and partners about data security and service reliability.

What to watch

Ahold Delhaize is expected to provide further updates as it assesses and mitigates the security issue. The company may issue a detailed statement on the nature of the breach and a timeline for restoring affected systems. Regulatory authorities may investigate the incident, and the company may offer credit monitoring or other protections to affected individuals if personal data is compromised. Industry experts may analyze the incident to identify potential vulnerabilities and recommend enhanced cybersecurity measures for retail networks.