Ahold Delhaize Confirms Cyberattack Forced Grocery Systems Offline in the US and Europe

Ahold Delhaize, the Dutch multinational grocery chain, said on Monday that a cyberattack forced it to take systems offline across most of its US and European brands. The company confirmed that suspicious activity it first announced last week was caused by malicious actors, and it filed a police report in the Netherlands. Online services in the US, the Netherlands and Belgium were disrupted, although physical stores remained open.

The company said it has no evidence that sensitive customer, employee or partner data was stolen, but the investigation is ongoing. It has not described the nature of the attack or said whether a ransom was involved, stating that further details could compromise its security measures or response. It notified Dutch cybersecurity authorities within 24 hours of detecting the incident. CEO Frans Muller apologised for the disruption and said taking systems offline was a necessary precaution.

Services are being restored in phases. Online shopping at US brands, including Food Lion and Stop & Shop, is not yet working but is expected to resume in the coming days. Websites and apps for Albert Heijn, Etos and Gall & Gall are back online, though Albert Heijn home deliveries are not expected to resume until Friday. E-commerce has been restored in Belgium and Central and Southeastern Europe. The company also suffered a cyberattack in 2024, in which information belonging to more than 2.2 million people was stolen.