Ahold Delhaize has taken some systems offline after identifying a security issue within its network, the food retail group said on October 12, 2026. The company, based in Zaandam, the Netherlands, said its teams were assessing the issue and taking steps to limit its impact. Physical stores remain open and continue serving customers.
In its official statement, Ahold Delhaize described the shutdowns as protective measures. “Protecting our infrastructure in the best interest of our customers, associates and partners is a top priority,” the company said, apologizing for inconvenience caused to customers and partners.
Ahold Delhaize Cyberattack
The disruption has affected several customer services. According to DutchNews, Albert Heijn’s website, app and home delivery service became unavailable after parts of its IT systems were switched off. Sister brands Etos and Gall & Gall were also affected, with customer service and logistics systems reported offline.
Albert Heijn stores remained open, and checkout systems continued working. However, personal discounts and app-linked savings schemes were paused. Electronic shelf labels could still display prices from the previous week’s offers, meaning customers might see a different price at the checkout.
The effects also extended beyond Dutch brands. Progressive Grocer reported that websites belonging to U.S. chains Food Lion, The Giant Co., Giant Food, Hannaford and Stop & Shop were unavailable at the time of its report. Ahold Delhaize’s statement said stores remained operational.
The company’s initial disclosure did not identify an attacker, explain how the issue started or name the systems taken offline. It also did not confirm ransomware, stolen information, or an entry point. These gaps leave the cause and full scope of the incident unresolved.
The shutdown should therefore be understood as a precaution, not proof of a particular attack method. Ahold Delhaize said it was taking systems offline “to help protect them.” That wording describes its response but does not establish whether attackers encrypted files or accessed customer records.
Similar shutdowns have disrupted other retail businesses. Cyber Security News previously reported that United Natural Foods took systems offline following a cyberattack in June 2025 after detecting unauthorized activity. That incident affected the distributor’s ability to fulfill and deliver customer orders.
The publication also covered Victoria’s Secret taking its website offline following a security incident in May 2025. Its physical stores continued operating while some digital services were suspended. These cases provide context for retail disruption, but do not establish a shared attacker or cause.
For Ahold Delhaize customers, the immediate impact is reduced access to online shopping and related services rather than a confirmed closure of stores. The company’s initial statement provided no restoration deadline or findings about data exposure, leaving both service recovery and the security investigation open.
Cut every SOC alert investigation by 21 min. Power your SOC with instant IOC context for immediate response: Integrate TI Lookup into your SOC
