Key points
- Ahold Delhaize disabled specific network systems to limit the impact of a security issue detected on October 12, 2026.
- Physical stores remain open, but digital services including websites, apps, and employee scheduling tools are disrupted in Europe and the US.
- The company did not confirm ransomware or data theft, stating the shutdowns were protective measures to assess and mitigate the problem.
Retailers must monitor operational continuity when Ahold Delhaize takes network systems offline to contain an active security incident. The Dutch-based multinational confirmed on October 12, 2026, that it disconnected parts of its infrastructure to protect assets, according to Cyber Security News. This action affects digital touchpoints for millions of weekly customers across Europe, the United States, and Indonesia, creating immediate service gaps despite physical store operations continuing.
In plain English
The company identified a security issue within its network and chose to isolate affected systems rather than leave them exposed, according to BleepingComputer. This precautionary shutdown means customers cannot access online platforms, mobile applications, or customer service portals for brands including Albert Heijn, Etos, and Gall & Gall in the Netherlands. In the United States, websites for Food Lion, Stop & Shop, Giant Food, and Hannaford are also unavailable, as reported by Progressive Grocer.
The background
Operational disruptions extend beyond consumer-facing digital services. Employees at Stop & Shop in the US reported difficulties accessing pay stubs and work schedules, according to BleepingComputer. Internal memos from Food Lion staff indicated that stores might be unable to process online orders for staging or handoff. Electronic shelf labels in some Dutch locations displayed previous week’s pricing, leading to potential price discrepancies at checkout counters during the outage period.
What changes now
Ahold Delhaize has not specified the root cause, entry point, or whether data was compromised or encrypted, according to Cyber Security News. The incident follows a November 2024 ransomware attack by the group INC Ransom that stole information from over 2.2 million individuals in the US, per BleepingComputer. The company apologized for inconvenience to partners and customers while teams work to assess the full scope and mitigate the current network security issue.
Background: Ransomware
Ransomware enters through weak entry points, moves laterally using stolen credentials, and encrypts files using asymmetric cryptography. You can interrupt the cycle by isolating network segments, enforcing least privilege, and maintaining offline backups that attackers cannot reach.
Read the full guide: How Ransomware Works: The Step-by-Step Infection Cycle
What to do and how to stay safe: Ahold Delhaize
- Monitor official company channels for updates on service restoration timelines before attempting online transactions.
- Verify in-store prices manually if digital shelf labels appear outdated or mismatched with checkout registers.
- Check alternative communication methods for employee schedules if internal portals are inaccessible.
- Review account statements for unauthorized activity once digital services resume, though no data breach is confirmed yet.
Step-by-step guide: Smartphone Security Updates for Small Business Operations
General security guidance from the Patch Review newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are Ahold Delhaize physical stores open during this incident?
Yes, the company confirmed that all physical retail locations remain open and continue serving customers in person.
Was customer data stolen in this specific October 2026 incident?
The company has not confirmed any data theft or ransomware involvement in this current event.
Which specific brands are affected by the system shutdown?
Disruptions impact Albert Heijn, Etos, Gall & Gall in Europe, and Food Lion, Stop & Shop, Giant Food, and Hannaford in the US.
