Key points
- Ahold Delhaize took systems offline on October 12, 2026, to contain a network security incident.
- Digital services for Albert Heijn, Etos, and Gall & Gall in Europe and several US chains are disrupted.
- Physical stores remain open, though checkout systems may show outdated prices and employee access is limited.
The short version
- Ahold Delhaize confirmed it is taking systems offline to mitigate a cybersecurity incident within its network.
- The disruption affects customer websites, apps, and employee tools for brands including Albert Heijn and Stop & Shop.
- No details regarding the attacker, method, or specific systems compromised have been released by the company.
The details
Ahold Delhaize, a multinational food retailer based in Zaandam, Netherlands, announced on October 12, 2026, that it is disconnecting parts of its network. According to the company’s official statement, the decision to take systems offline is a protective measure intended to assess and mitigate a security issue. The retailer serves approximately 60 million customers weekly through more than 9,400 stores in Europe, the United States, and Indonesia.
The incident has caused significant digital service outages. Customers using Albert Heijn, Etos, and Gall & Gall in the Netherlands cannot access their websites, mobile applications, or customer service platforms. According to DutchNews, home delivery services for Albert Heijn are also unavailable. In the United States, Progressive Grocer reported that the websites for Food Lion, The Giant Co., Giant Food, Hannaford, and Stop & Shop were inaccessible.
Despite the digital disruptions, physical retail locations remain open. Albert Heijn stores are processing transactions, but personal discounts and app-linked savings are paused. Electronic shelf labels may display prices from the previous week, potentially causing discrepancies at checkout. Employees at Stop & Shop reported difficulties accessing pay stubs and schedules, while Food Lion staff received internal memos stating that stores might be unable to handle online orders.
The context
Ahold Delhaize has not identified the cause of the incident or confirmed whether ransomware was involved. The initial disclosure did not specify an entry point, name affected systems beyond the general description, or confirm data theft. A spokesperson was not available to clarify if corporate or store-specific systems were targeted or if devices were encrypted, according to BleepingComputer.
This event marks the second major security challenge for the company in recent years. In November 2024, the retailer reported a ransomware attack on its U.S. systems attributed to the group INC Ransom, which resulted in the theft of personal, financial, and health information for over 2.2 million individuals.
The current shutdown is a precautionary step. Cyber Security News noted that similar tactics were used by United Natural Foods in June 2025 after detecting unauthorized activity, which disrupted order fulfillment. Ahold Delhaize’s current response focuses on limiting impact rather than confirming an active breach.
What to watch
Analysts should monitor for further statements from Ahold Delhaize regarding the scope of the incident. Key indicators include whether the company confirms data exfiltration or attributes the attack to a specific threat actor. Retailers and IT leaders may also watch for similar patterns in other large-scale retail networks as the investigation progresses.
What to do and how to stay safe: Ahold Delhaize
- Check the official websites of affected retailers for updates on service availability and checkout procedures.
- Monitor personal bank and credit card statements for unauthorized transactions if you have used digital services with these brands recently.
- Avoid sharing account credentials or sensitive information with unsolicited emails claiming to be from Ahold Delhaize support.
- Verify order statuses through official channels once systems are restored, as digital tracking may have been interrupted.
Step-by-step guide: Secure Home Routers for Small Business Networks
General security guidance from the TechSec Headlines newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are Ahold Delhaize stores still open to customers?
Yes, physical stores remain open and are serving customers, though digital services and some employee tools are offline.
Has Ahold Delhaize confirmed that customer data was stolen?
No, the company has not confirmed whether any data was stolen or if ransomware was used in this specific incident.
Which specific brands are experiencing digital outages?
Albert Heijn, Etos, and Gall & Gall in Europe, and Food Lion, Stop & Shop, Giant Food, and Hannaford in the U.S. are affected.
