Threat watch / Attack
Ahold Delhaize: a cyberattack takes grocery websites and apps offline
The Dutch-Belgian grocery group says malicious actions by others forced it to take websites, apps and other systems offline in Europe and the U.S. from October 11. Stores stayed open. It now expects the incident to cut fourth-quarter net sales by €200 million to €250 million.
- Sector
- Retail
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 8 Nov 2026
- What was stolen
- Ahold Delhaize says its investigation has found no evidence so far that sensitive customer, associate or partner data was stolen. It has not said whether devices were encrypted.[2][4] Checked 8 Nov 2026
- Who was impacted
- Customers of Albert Heijn, Etos and Gall & Gall in the Netherlands and Delhaize in Belgium lost websites, apps and customer service, and Albert Heijn cancelled orders and paused home deliveries. U.S. brands' e-commerce was also down. The group says the disruption mainly hit online services in the Benelux and the U.S. and its Benelux supply chain; Bol was not affected.[1][2][3][4] Checked 8 Nov 2026
- Threat actor
- Not attributed
Timeline
- The incident starts on Sunday, October 11, according to Belga. [4]
- Delhaize says its customer online ordering is fully working again; franchise stores can reorder stock, through an old system. [5]
- Ahold Delhaize confirms the disruption was caused by "malicious actions" of others, says it informed the Dutch NCSC within 24 hours and files a police report with the Dutch police. Albert Heijn's website and app are back online. [2][3][4]
- In its third-quarter results, the group expects the incident to reduce fourth-quarter net sales by €200 million to €250 million and operating income by €75 million to €100 million, and lowers its 2026 free cash flow outlook. It says most of the disruption was contained within two weeks and work continues to fully restore operations. [1][6]