Ahold Delhaize has published an update on the cybersecurity incident it first disclosed on Monday, October 12, 2026. The company detected suspicious activity in its IT infrastructure and engaged cybersecurity experts. The investigation confirmed that the activity resulted from malicious actions of others.
As a precaution, Ahold Delhaize proactively took certain systems offline, including the websites and apps of its brands. This affected most of its brands across Europe and the United States, although the impact varied by brand. All stores remained open to customers throughout the incident.
The company notified the Dutch National Cyber Security Centre within 24 hours of discovering the activity and has kept law enforcement and other regulators informed. It has now also filed a formal police report with the Dutch police. Frans Muller, President and CEO of Ahold Delhaize, said the investigation to date confirms that taking systems offline was the right decision.
Recovery is progressing. Albert Heijn’s website and app are back online, with home deliveries expected to resume from Friday, October 23. E-commerce in Belgium is fully operational, and US e-commerce services are expected back in the coming days. According to the company, there is currently no evidence that sensitive customer, associate or partner data was taken, although the investigation continues.
The case shows why a tested incident response plan, fast reporting to authorities and a phased recovery approach matter. Review whether your own organization can isolate systems quickly and keep core operations running.
Read newsroom.aholddelhaize.com article for more information.
