Ahold Delhaize Reopens Digital Channels After Cyberattack; No Data Theft Confirmed In US And Europe
The retail giant is restoring digital platforms across multiple regions following a security incident, with no evidence of data theft found so far.
Key points
- Ahold Delhaize confirmed a cyberattack disrupted services in the US and Europe.
- Physical stores remained open while digital systems were taken offline for safety.
- The company states there is no evidence that sensitive data was stolen.
Ahold Delhaize has begun restoring digital services disrupted by a cyberattack that affected operations across the United States and Europe. The incident forced the retailer to take websites, applications and customer service platforms offline to contain the issue. Physical stores remained open throughout the event, allowing customers to shop in person despite the digital outages.
Root cause
The company attributed the disruption to malicious actions by external actors, though it did not specify the technical nature of the attack. Ahold Delhaize stated that taking systems offline was a precautionary measure to protect its network. The organisation notified the Dutch National Cyber Security Centre within 24 hours of discovering the activity and has continued providing updates to law enforcement and regulatory authorities.
Attack path
Before the public disclosure, customers were unable to access services for brands including Albert Heijn, Etos and Gall & Gall in the Netherlands, and Delhaize in Belgium. Employees at Stop & Shop in the United States reported difficulties accessing schedules and pay stubs. The company did not confirm whether devices were encrypted or if corporate systems were fully compromised, redirecting inquiries to its official statements.
Affected versions
The disruption impacted a wide range of digital touchpoints across multiple countries. Services affected included e-commerce websites, mobile applications and internal employee platforms. As TechSec Observer reported on 14 October 2026, the retailer initially isolated systems to mitigate the network security issue. Most Central and Southeastern European services are now online, while restoration continues for other European and US brands.
Mitigation
- Albert Heijn’s website and app are back online, with home deliveries resuming from Friday, 23 October.
- E-commerce services for Ahold Delhaize USA brands are expected to return within days.
- Belgian e-commerce operations are now fully operational.
- Etos and Gall & Gall websites are available for customers.
What it means for organisations
Organisations should review their incident response plans to ensure clear communication channels with stakeholders during service disruptions. Teams usually need to verify that backup systems can maintain critical operations when primary networks are isolated. Leadership should prepare to address employee concerns regarding access to payroll and scheduling tools. Security teams must coordinate closely with national cyber security centres to report findings and receive guidance on containment strategies.
What to do and how to stay safe: Ahold Delhaize
- Monitor official channels for updates on service restoration timelines.
- Verify that employee access to critical internal systems is functional.
- Check whether customer data remains intact and secure.
- Review incident response procedures for future reference.
General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Was any customer data stolen in the Ahold Delhaize cyberattack?
The company stated there is no evidence that sensitive customer, associate or partner data was stolen.
When will Ahold Delhaize US e-commerce services be restored?
E-commerce services at US brands are expected to come back online in the coming days.
Did the cyberattack affect physical store operations?
All stores across all brands remained open throughout the incident to serve customers.
