{"id":"ahold-delhaize-supermarket-cyberattack-oct-2026","category":"breach","status":"live","title":"Ahold Delhaize cyberattack disrupts supermarket websites, apps and grocery orders","tldr":"Ahold Delhaize’s cyberattack disrupted supermarket apps and orders across Europe and the US. Services returned in stages, but a group-wide all-clear remains unconfirmed. Check orders and refunds directly through your supermarket.","summary":"Ahold Delhaize disconnected systems after a cyberattack that began on 11 October and was publicly disclosed the next day. The shutdown affected most of its supermarket brands across Europe and the US, disrupting websites, apps and online grocery orders while physical stores stayed open. The company has not disclosed how many customers or stores experienced disruption. By 19 October, Belgian online shopping was fully operational, several European websites had returned and US online shopping was still being restored. Albert Heijn resumed deliveries and reopened ordering to all customers on 23 October, initially at reduced capacity, and confirmed refunds for prepaid cancelled orders. As of 3 November, the reviewed statements do not establish full restoration across the group. Ahold Delhaize filed a Dutch police report on 19 October; its investigation remained open, with no evidence then of sensitive customer, employee or partner data theft. The attack method was not disclosed.","action":"Check your order, refund and any compensation by opening your supermarket’s app or website directly. Albert Heijn says cancelled-order credits are applied automatically; use its official customer service if a refund is missing. Be cautious of messages asking you to follow a link to claim compensation.","product":"Ahold Delhaize supermarket websites, apps and online ordering services across Europe and the US","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["ahold-delhaize","supermarkets","cyberattack","service-disruption","online-shopping"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Ahold Delhaize takes precautionary measures following cybersecurity incident","url":"https://newsroom.aholddelhaize.com/ahold-delhaize-takes-precautionary-measures-following-cybersecurity-incident/","by":"Ahold Delhaize","date":"2026-10-12"},{"kind":"advisory","title":"Update on Ahold Delhaize's cybersecurity incident","url":"https://newsroom.aholddelhaize.com/update-on-ahold-delhaizes-cybersecurity-incident","by":"Ahold Delhaize","date":"2026-10-14"},{"kind":"advisory","title":"Ahold Delhaize update on status of cybersecurity incident","url":"https://newsroom.aholddelhaize.com/ahold-delhaize-update-on-status-of-cybersecurity-incident/","by":"Ahold Delhaize","date":"2026-10-19"},{"kind":"advisory","title":"Mediastatement inzake cybersecurity incident","url":"https://nieuws.ah.nl/mediastatement-inzake-it-incident","by":"Albert Heijn","date":"2026-10-26"},{"kind":"news","title":"Retail giant Ahold Delhaize takes systems offline after cyberattack","url":"https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/","by":"BleepingComputer","date":"2026-10-12"},{"kind":"news","title":"Geen bezorging en verkeerde winkelprijzen na 'cyberveiligheidsincident' bij Albert Heijn","url":"https://nos.nl/artikel/2634644-geen-bezorging-en-verkeerde-winkelprijzen-na-cyberveiligheidsincident-bij-albert-heijn","by":"NOS","date":"2026-10-12"},{"kind":"news","title":"Ahold Delhaize Restoring Services Disrupted by Cyberattack","url":"https://www.securityweek.com/ahold-delhaize-restoring-services-disrupted-by-cyberattack/amp/","by":"SecurityWeek","date":"2026-10-20"}],"started":"2026-10-11","closed":null,"created":"2026-11-03T21:46:56.802Z","updated":"2026-11-03T21:46:56.802Z","cve_notes":[],"timeline":[{"at":"2026-10-23","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Albert Heijn restarted deliveries and reopened online ordering to everyone, with about one-third of normal delivery capacity and full capacity expected on 28 October. It said prepaid cancelled orders had been refunded and announced automatic €10 shopping credits for cancelled orders.","url":"https://nieuws.ah.nl/mediastatement-inzake-it-incident","by":"Albert Heijn","patch":null},{"at":"2026-10-19","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Ahold Delhaize confirmed malicious activity, said most brands in Europe and the US were affected, and filed a Dutch police report. Belgian online shopping was fully operational and several European websites had returned, but US online shopping restoration remained pending; investigators still had no evidence of sensitive customer, employee or partner data theft.","url":"https://newsroom.aholddelhaize.com/ahold-delhaize-update-on-status-of-cybersecurity-incident/","by":"Ahold Delhaize","patch":null},{"at":"2026-10-13","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Ahold Delhaize announced a controlled restart of certain systems with external cybersecurity specialists assisting. Its statement, updated on 14 October, said investigators had found no evidence that customer, employee or partner data had been taken.","url":"https://newsroom.aholddelhaize.com/update-on-ahold-delhaizes-cybersecurity-incident","by":"Ahold Delhaize","patch":null},{"at":"2026-10-12","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"BleepingComputer reported customer website, app and support outages across several brands. An internal Food Lion memo warned that stores might be unable to prepare or hand over online orders.","url":"https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/","by":"BleepingComputer","patch":null},{"at":"2026-10-12","added":"2026-11-03T21:45:10.669Z","kind":"disclosed","text":"Ahold Delhaize publicly disclosed a network security incident and said it had taken some systems offline. Stores remained open.","url":"https://newsroom.aholddelhaize.com/ahold-delhaize-takes-precautionary-measures-following-cybersecurity-incident/","by":"Ahold Delhaize","patch":null},{"at":"2026-10-11","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Albert Heijn says the incident began on Sunday afternoon, affecting Albert Heijn, Etos and Gall & Gall. Some systems were temporarily disconnected.","url":"https://nieuws.ah.nl/mediastatement-inzake-it-incident","by":"Albert Heijn","patch":"na"}],"url":"https://hard.fyi/live/ahold-delhaize-supermarket-cyberattack-oct-2026/","json":"https://hard.fyi/api/live?id=ahold-delhaize-supermarket-cyberattack-oct-2026"}