Cyberattack knocks grocery giant Ahold Delhaize's online shopping offline in the US and Europe

Ahold Delhaize, one of the world's largest supermarket groups, is restoring its systems after a cyberattack that disrupted online shopping for customers on both sides of the Atlantic. The problems began on Sunday, 11 October 2026, when outages hit its Dutch chain Albert Heijn, and on Monday the company said it had identified a security issue and was “taking some systems offline to help protect them,” The Record reported.

The impact varied from brand to brand. In the United States, Food Lion and Stop & Shop saw disruption to online grocery orders, distribution centres and in-store pricing, according to The Record. In the Netherlands, Albert Heijn's website, app and customer service went down and grocery deliveries were suspended, while electronic shelf labels in some stores showed out-of-date promotional prices. The drugstore chain Etos and the drinks retailer Gall & Gall were also affected, and in Belgium customers of Delhaize could not place new online orders.

Physical stores stayed open throughout. “At this time, our stores are open and serving customers,” the company said.

Was any data stolen?

Ahold Delhaize says it has found no evidence that customer or employee data was taken and that it has informed the relevant authorities, SecurityWeek reported. No group had publicly claimed responsibility at the time of reporting, and the company has not said whether ransomware was involved. In an update, it said it had begun “a controlled re-launch of certain systems” but gave no timeline for a full recovery.

SecurityWeek also noted that it is not clear whether the incident is connected to a separate attack on refrigeration control systems that hit supermarkets across Europe over the same weekend.

Not the first time

The company has been targeted before. A cyberattack in November 2024 disrupted several of its US chains, including Stop & Shop, Food Lion and Hannaford. A ransomware group called INC Ransom later claimed responsibility, and in June 2025 Ahold Delhaize told US regulators that personal information belonging to more than 2.2 million people had been compromised, SecurityWeek reported.

What happens next

Customers of the affected chains should expect online services to return gradually as systems are restarted. In the meantime, shoppers should be wary of emails or text messages that mention the outage and ask for passwords or payment details, a common tactic after well-publicised cyberattacks.