Ahold Delhaize restores digital services after cyberattack; US/EU stores open, no data breach found
The grocery giant is bringing digital platforms back online after taking systems offline to contain a security incident, with physical stores remaining open throughout the disruption.
Key points
- Ahold Delhaize confirmed a cyberattack disrupted services across its US and European brands last week.
- The company took systems offline as a precaution, causing issues for websites, apps, and employee access.
- Investigations have found no evidence that sensitive customer, associate, or partner data was stolen.
Ahold Delhaize, a major international food retailer, has begun restoring online services after a cyberattack forced it to take key systems offline across the United States and Europe. The incident disrupted digital channels for several of its brands, including Albert Heijn, Etos, Gall & Gall, and Delhaize, while physical stores remained open for customers throughout the event.
What we know
According to BleepingComputer, the disruption affected customer-facing platforms and internal employee tools. Customers could not use websites or apps for Albert Heijn, Etos, and Gall & Gall in the Netherlands, or Delhaize in Belgium. In the US, employees at Stop & Shop reported difficulties accessing schedules and pay stubs. Ahold Delhaize stated on Monday that it had taken systems offline to protect its infrastructure from the malicious activity.
The company is now phasing services back online. Albert Heijn’s website and app are operational, with home deliveries expected to resume from Friday, 23 October. Etos and Gall & Gall websites are also available. E-commerce services for US brands are expected to return in the coming days, while Belgian e-commerce is fully operational. Most store websites and apps in Central and Southeastern Europe are now online.
Ahold Delhaize notified the Dutch National Cyber Security Centre (NCSC) within 24 hours of discovering the attack. The company has continued providing updates to the NCSC, law enforcement, and other regulatory authorities. It also filed a formal police report with the Dutch police this week. An ongoing investigation has not found evidence that sensitive customer, associate, or partner data was stolen.
Defender's checklist
- Monitor official channels for updates on service restoration timelines and affected brands.
- Verify the status of e-commerce platforms before attempting to place orders or make payments.
- Check employee access portals for any ongoing restrictions on viewing schedules or pay information.
- Report any unusual activity or access issues to the retailer’s customer support teams immediately.
The background in plain language
When organisations detect unauthorised activity in their networks, they often isolate affected systems to prevent further damage. This precautionary step can disrupt digital services, including websites and apps, while physical operations continue. Teams usually work to restore services in phases, prioritising critical functions.
Customers may experience delays in online orders or access to personal accounts during this process. It is important to distinguish between service disruption and data theft; not all cyber incidents result in stolen information. Organisations typically notify authorities and conduct thorough investigations to determine the extent of the breach and ensure customer data remains secure.
What to do and how to stay safe: Ahold Delhaize
- Check the official websites of affected brands for the latest status updates on service restoration.
- If you are an employee, contact your IT department for guidance on accessing work-related systems.
- Monitor your bank and credit card statements for any unauthorised transactions, even if no data breach is confirmed.
- Avoid using unofficial channels for customer support; rely only on verified company communications.
General security guidance from the TechWire Beat newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Was any customer data stolen in the Ahold Delhaize cyberattack?
No, the company stated that an ongoing investigation has not found evidence that sensitive customer, associate, or partner data was stolen.
When will US e-commerce services be restored?
Ahold Delhaize expects e-commerce services at its US brands to come back in the coming days, but has not provided a specific timeframe.
Are physical stores still open during the cyberattack?
Yes, all stores across all brands have remained open throughout the incident, while the company works to restore digital systems.
