Ahold Delhaize disconnects systems after security incident hits US, Belgium, Netherlands

Ahold Delhaize announced on Monday that it is taking precautionary measures following a cybersecurity incident. The Dutch multinational retailer stated that its teams are working to assess and mitigate the issue. This action impacts operations across the United States, the Netherlands and Belgium. The company emphasized that protecting infrastructure remains a top priority for its customers and partners.

What systems are currently affected?

Distribution centers, online grocery orders and in-store pricing have been disrupted. It remains unclear whether these disruptions resulted directly from the incident or from the decision to take systems offline. In the Netherlands, Albert Heijn, Etos and Gall & Gall experienced outages starting Sunday afternoon. Websites, apps and customer service were unavailable, and deliveries were suspended. Electronic shelf labels showed outdated promotional prices.

Are physical stores still operating?

Ahold Delhaize confirmed that its stores are open and serving customers. However, operational challenges persist. In the US, Food Lion staff reportedly characterized the situation as an IT outage on social media. At Stop & Shop, customers reported a lack of information regarding delivery status. One customer noted they were housebound and worried about a scheduled delivery, highlighting the uncertainty surrounding service levels.

What is known about the scope?

The company operates across nine countries and employs more than 400,000 people. Its American brands include Food Lion and Stop & Shop. The retailer did not explain the nature of the incident. It also did not disclose whether customer or employee data was compromised. In Belgium, Delhaize customers could not place new orders or contact support, though the website and app remained accessible.

What comes next for operations?

The company has not provided a timeline for restoring all affected systems. It apologized for the inconvenience caused to customers and partners. This follows a 2024 cyberattack that compromised information for more than 2.2 million people. That previous incident caused issues at prominent US supermarkets. Current efforts focus on containment and assessment without a stated restoration schedule.

Questions to ask your suppliers

Security operations teams should determine if suppliers have defined incident response protocols that include customer notification timelines. Verify whether third-party access to your network is segmented to limit lateral movement during breaches. Check if suppliers provide regular vulnerability assessments and penetration testing results. Ensure contracts include clauses requiring immediate disclosure of data breaches affecting shared information. Assign a specific internal owner to monitor supplier security posture and report changes to the risk committee.

What to do and how to stay safe: Ahold Delhaize

• Monitor official communications from Ahold Delhaize for updates on service restoration.
• Check whether your organization uses software or services hosted by this retailer.
• Review recent invoices or data exchanges with Albert Heijn, Food Lion or Stop & Shop.
• Prepare contingency plans for potential supply chain disruptions in grocery sectors.

Step-by-step guide: Browser Security Settings for Small Business Teams

General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Did Ahold Delhaize confirm data theft in this incident?

No, the company did not disclose whether customer or employee information was compromised.

Which countries are experiencing disruptions from this cyber incident?

The US, Netherlands and Belgium are reportedly impacted by the security event.

Are Ahold Delhaize stores currently open to the public?

Yes, the company stated that its stores are open and serving customers.