Dutch-based retail giant Ahold Delhaize confirmed on October 12, 2026, that it had proactively shut down parts of its network after discovering what it described only as “a security issue.” The announcement, posted to the company’s newsroom, offered few technical details, but the operational fallout was immediate and visible across several of the company’s grocery brands on both sides of the Atlantic.

Ahold Delhaize, headquartered in Zaandam, framed the shutdown as a precaution rather than confirmation of a specific attack. “Protecting our infrastructure in the best interest of our customers, associates and partners is a top priority,” the company said, apologizing for the disruption while declining to name an attacker, describe how the incident began, or confirm whether any customer data was accessed.

Albert Heijn Customers Feel the Pinch First

The most visible impact landed on Albert Heijn, the Netherlands’ largest supermarket chain and an Ahold Delhaize flagship brand. According to Dutch outlet DutchNews, the Albert Heijn website, mobile app, and home delivery service all went dark after portions of its IT systems were deliberately switched off. Sister brands Etos, a drugstore chain, and Gall & Zall, Delhaize’s wine and liquor retailer, reported their own disruptions, with customer service and logistics systems reportedly affected as well.

Physical Albert Heijn stores stayed open throughout, and checkout systems kept functioning, but the digital side of the shopping experience took a visible hit:

• Personal discounts and app-linked loyalty savings were paused
• Online ordering and scheduled home deliveries became unavailable
• Electronic shelf labels in some stores continued displaying the previous week’s promotional pricing, meaning shoppers could see one price on the shelf and a different one at checkout

Disruption Crosses the Atlantic

Ahold Delhaize’s reach extends well beyond the Netherlands, and the incident’s effects weren’t confined to Dutch shoppers. Trade publication Progressive Grocer reported that websites belonging to several of the company’s American grocery brands, including Food Lion, The Giant Company, Giant Food, Hannaford, and Stop & Shop, were unreachable at the time of its reporting. As with the Dutch operations, Ahold Delhaize maintained that physical stores across its US footprint remained open and operational even as online services faltered.

What Remains Unknown

Perhaps the most notable thing about Ahold Delhaize’s disclosure is what it doesn’t say. The company has not confirmed ransomware, has not said whether any systems were encrypted, and has not indicated whether customer or employee data was accessed or exfiltrated. Its own language, that it was taking systems offline “to help protect them,” describes a defensive response but stops well short of identifying what it was defending against.

That ambiguity means outside observers should be cautious about jumping to conclusions. Taking systems offline proactively is a standard incident-response move used in scenarios ranging from a detected intrusion attempt to a full-blown ransomware encryption event, and the breadth of this shutdown, spanning multiple brands and countries, suggests the company judged the risk serious enough to warrant broad precautionary isolation rather than a narrow, surgical response.

Part of a Recurring Pattern in Retail

Large retailers taking systems offline after detecting suspicious activity has become a familiar pattern. Distributor United Natural Foods shut down systems after a cyberattack in June 2025 that disrupted its ability to fulfill and deliver orders, and Victoria’s Secret took its website offline following a security incident the previous month while keeping its physical stores running. Those cases don’t establish any connection to Ahold Delhaize’s current incident, but they illustrate how often retail and grocery operators are finding themselves forced into this same defensive playbook, where protecting back-end systems temporarily outweighs the cost of disrupted digital services.

What Customers and Watchers Should Expect Next

For now, Ahold Delhaize customers face reduced access to online shopping, delivery scheduling, and loyalty discounts rather than any disruption to in-person grocery shopping. The company has not published a restoration timeline or indicated when a fuller account of the incident, including its cause and whether any data was compromised, might be released. Until that information surfaces, both the scope of the breach and the attacker’s identity, if there is one, remain open questions that security researchers and affected customers will be watching closely.