Ahold Delhaize cyberattack disrupts supermarket websites, apps and grocery orders
Ahold Delhaize’s cyberattack disrupted supermarket apps and orders across Europe and the US. Services returned in stages, but a group-wide all-clear remains unconfirmed. Check orders and refunds directly through your supermarket.
Check your order, refund and any compensation by opening your supermarket’s app or website directly. Albert Heijn says cancelled-order credits are applied automatically; use its official customer service if a refund is missing. Be cautious of messages asking you to follow a link to claim compensation.
What’s happening
Ahold Delhaize disconnected systems after a cyberattack that began on 11 October and was publicly disclosed the next day. The shutdown affected most of its supermarket brands across Europe and the US, disrupting websites, apps and online grocery orders while physical stores stayed open. The company has not disclosed how many customers or stores experienced disruption. By 19 October, Belgian online shopping was fully operational, several European websites had returned and US online shopping was still being restored. Albert Heijn resumed deliveries and reopened ordering to all customers on 23 October, initially at reduced capacity, and confirmed refunds for prepaid cancelled orders. As of 3 November, the reviewed statements do not establish full restoration across the group. Ahold Delhaize filed a Dutch police report on 19 October; its investigation remained open, with no evidence then of sensitive customer, employee or partner data theft. The attack method was not disclosed.
- What
- Breach
- Affects
- Ahold Delhaize supermarket websites, apps and online ordering services across Europe and the US
- Fixed in
- Nothing to patch
- Since
- 11 Oct 2026
Timeline
- Update
Albert Heijn restarted deliveries and reopened online ordering to everyone, with about one-third of normal delivery capacity and full capacity expected on 28 October. It said prepaid cancelled orders had been refunded and announced automatic €10 shopping credits for cancelled orders.
- Update
Ahold Delhaize confirmed malicious activity, said most brands in Europe and the US were affected, and filed a Dutch police report. Belgian online shopping was fully operational and several European websites had returned, but US online shopping restoration remained pending; investigators still had no evidence of sensitive customer, employee or partner data theft.
- Update
Ahold Delhaize announced a controlled restart of certain systems with external cybersecurity specialists assisting. Its statement, updated on 14 October, said investigators had found no evidence that customer, employee or partner data had been taken.
- Update
BleepingComputer reported customer website, app and support outages across several brands. An internal Food Lion memo warned that stores might be unable to prepare or hand over online orders.
- Made public
Ahold Delhaize publicly disclosed a network security incident and said it had taken some systems offline. Stores remained open.
- UpdateNothing to patch
Albert Heijn says the incident began on Sunday afternoon, affecting Albert Heijn, Etos and Gall & Gall. Some systems were temporarily disconnected.
Sources
- Ahold Delhaize takes precautionary measures following cybersecurity incidentAhold Delhaize · 12 Oct 2026
- Update on Ahold Delhaize's cybersecurity incidentAhold Delhaize · 14 Oct 2026
- Ahold Delhaize update on status of cybersecurity incidentAhold Delhaize · 19 Oct 2026
- Mediastatement inzake cybersecurity incidentAlbert Heijn · 26 Oct 2026
- Retail giant Ahold Delhaize takes systems offline after cyberattackBleepingComputer · 12 Oct 2026
- Geen bezorging en verkeerde winkelprijzen na 'cyberveiligheidsincident' bij Albert HeijnNOS · 12 Oct 2026
- Ahold Delhaize Restoring Services Disrupted by CyberattackSecurityWeek · 20 Oct 2026