Ahold Delhaize confirms cyberattack forced systems offline

Ahold Delhaize confirmed on Monday that a cyberattack caused the security issue it disclosed on October 12, and that it took websites, apps and other systems offline at most of its brands across Europe and the United States as a precaution.

Why it matters: The group runs Food Lion, Giant Food, Stop & Shop and Albert Heijn, so the shutdown hit grocery e-commerce on two continents for a week, with US online services still down and home deliveries in the Netherlands not due back until Friday.

Data as of Ahold Delhaize statement of October 19, 2026, read in full on the company newsroom: it confirms the malicious cause, the precautionary shutdown, the police report filed Monday and the restoration timetable. The Register report of the same day, read in full, adds the brand list and notes the company did not answer whether the incident is linked to the French supermarket refrigeration attacks that began October 11. Developing item.

Ahold Delhaize confirmed on Monday that the suspicious activity in its IT infrastructure, first disclosed on October 12, resulted from the malicious actions of others. The company said it proactively took certain systems offline, including brand websites and apps, as a precaution, and that the move affected most of its brands across Europe and the United States, among them Food Lion, Giant Food, Stop & Shop and Albert Heijn. All physical stores stayed open throughout.

Restoration is partway done. Albert Heijn’s website and app are back, with Dutch home deliveries expected to resume on Friday, October 23, Belgian e-commerce is fully operational, and e-commerce at the US brands is expected back in the coming days. The company said it has no evidence at this stage that any sensitive customer, associate or partner data was taken, that it notified the Dutch National Cyber Security Centre within 24 hours of finding the malicious activity, and that it filed a formal report with the Dutch police on Monday.

Ahold Delhaize confirms cyberattack forced systems offline

Sources