The grocery giant took systems offline to protect them from a cyberattack. Most European services are back, while US e-commerce returns soon.
Key points
- Ahold Delhaize confirmed a cyberattack disrupted services across the US and Europe last week.
- Physical stores remained open throughout the incident, but online shopping and apps were affected.
- The company states there is no evidence that sensitive customer or employee data was stolen.
Ahold Delhaize, a major food retailer, took its digital systems offline to stop a cyberattack. The incident disrupted online services in the US and Europe, though physical stores stayed open.
What happened
Ahold Delhaize confirmed that a cyberattack disrupted services at stores across Europe and the United States last week, according to BleepingComputer. The company took systems offline on October 12 to protect its network from a security issue. This precautionary measure impacted online orders and deliveries for brands like Albert Heijn and Stop & Shop.
Employees at US Stop & Shop locations reported trouble accessing schedules and pay stubs before the public disclosure. Customers could not use websites, apps, or customer service platforms for Albert Heijn, Etos, Gall & Gall, and Delhaize. The retail giant notified the Dutch National Cyber Security Centre within 24 hours of discovering the malicious activity.
Why it matters
Taking systems offline is a common defensive tactic to limit damage from an active breach. It prevents attackers from moving laterally across the network or exfiltrating data. This disruption affects availability, a core security principle, but protects confidentiality. Retailers must balance keeping physical stores open with securing digital infrastructure.
The fix
The company is restoring services in phases. Albert Heijn’s website and app are back online, with home deliveries resuming October 23. Etos and Gall & Gall sites are available. E-commerce in Belgium is fully operational. US brand e-commerce is expected to return in the coming days, though no specific timeframe was given.
Why it matters
When organizations face active threats, isolating affected systems is standard procedure. This limits the attacker's ability to spread or steal information. Users should expect service interruptions during such containment efforts. Monitoring official channels for restoration updates is key. Teams usually prioritize critical infrastructure first.
What to do and how to stay safe: Ahold Delhaize
- Check the official website of your local Ahold Delhaize brand for service status updates.
- Monitor your bank and credit card statements for any unauthorized transactions.
- Use strong, unique passwords for your online shopping accounts to reduce risk.
- Be cautious of phishing emails claiming to provide incident updates or password resets.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Was any customer data stolen in the Ahold Delhaize cyberattack?
No, the company stated that an ongoing investigation has not found evidence that sensitive customer, associate, or partner data was stolen.
Are physical grocery stores still open?
Yes, Ahold Delhaize confirmed that all stores across all brands have remained open throughout the incident.
When will US e-commerce services be restored?
The company expects e-commerce services at its US brands to come back in the coming days, but did not provide a specific date.
