Ahold Delhaize halts Albert Heijn, Stop & Shop online services to contain network security issue
The retail giant took digital services offline across Europe and the US to mitigate a network security issue, while physical stores remain open.
Key points
- Ahold Delhaize disabled select systems to contain an unspecified security issue within its corporate network.
- Digital services for Albert Heijn, Etos, and US chains like Stop & Shop are currently inaccessible.
- Physical retail locations remain open, though checkout and order fulfilment processes face disruptions.
Ahold Delhaize has disconnected specific network components following the detection of a security issue within its infrastructure. The multinational retailer, which operates over 9,400 stores across Europe, the United States, and Indonesia, confirmed the incident in a press release published on 12 October 2026. The company stated that its teams are actively assessing the situation and have taken systems offline as a protective measure to limit potential impact.
Root cause
The retailer has not disclosed the origin of the security issue or the specific vulnerability exploited. According to Cyber Security News, the initial statement did not identify an attacker, explain the entry point, or confirm whether ransomware was involved. The company described the shutdowns purely as protective steps to safeguard infrastructure, leaving the technical cause and full scope of the incident unresolved at this stage.
Attack path
Details regarding the attack vector remain unavailable. Ahold Delhaize did not specify whether external actors breached the network or if the issue stemmed from internal configuration errors. SecurityWeek noted that it is unclear if this event is related to previous attacks targeting refrigeration systems in European supermarkets. The company has not confirmed if any data was exfiltrated or if files were encrypted during this specific incident.
Affected versions
The disruption impacts multiple digital platforms and internal systems across several brands:
- Albert Heijn, Etos, and Gall & Gall websites and apps in the Netherlands and Belgium are offline.
- U.S. chains including Food Lion, Stop & Shop, Giant Food, and Hannaford have experienced website outages.
- Internal employee systems, such as schedule and pay stub access for Stop & Shop staff, are reportedly inaccessible.
Mitigation
Ahold Delhaize is currently assessing the network to mitigate the issue. The primary mitigation strategy involves taking affected systems offline to prevent further compromise. The company has not yet released a patch or a detailed timeline for restoring full digital services. Physical stores remain open, but customers may encounter issues with online orders, home deliveries, and app-linked discounts.
What to do and how to stay safe: Ahold Delhaize
- Monitor official channels from Ahold Delhaize and its subsidiary brands for updates on service restoration timelines.
- Avoid entering sensitive personal or payment information on any non-functional or suspiciously behaving retailer websites.
- Check alternative payment methods if you have pending orders or subscriptions linked to the affected digital platforms.
- Verify the status of employee payroll and schedule systems through direct contact with local management if remote access fails.
General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are Ahold Delhaize physical stores still open?
Yes, the company confirmed that physical stores remain open and continue serving customers, although some checkout and order processes may be disrupted.
Was data stolen in this incident?
The company has not confirmed whether any customer or employee data was stolen or accessed during this specific security issue.
Is this related to the previous ransomware attack?
It is currently unclear if this incident is related to the November 2024 ransomware attack that affected over 2.2 million individuals.
