Ahold Delhaize October 2026 cyberattack disrupts Benelux/US online and supply chain; Q4 sales hit €200–250M
Ahold Delhaize group IT / brand e-commerce and Benelux supply-chain systems (Albert Heijn, Delhaize, Food Lion, Hannaford and other brands); Bol not impacted
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
On Oct 12 2026 Ahold Delhaize detected a cybersecurity issue in its IT infrastructure and took systems offline as a precaution. Brands' physical stores stayed open, but websites, apps and e-commerce were disrupted across parts of Europe and the United States, along with Benelux supply-chain operations; Bol was not impacted. On Oct 19 the company said the activity was malicious, that it had notified the Dutch NCSC within 24 hours, filed a police report, and had no evidence at that time of sensitive customer, associate or partner data theft. In its Nov 4 Q3 2026 results, Ahold Delhaize estimated the incident will cut Q4 net sales by €200–250 million and underlying/IFRS operating income by €75–100 million, and lowered full-year guidance; CEO Frans Muller said most disruption was contained within two weeks while full restoration continues. Attack type has not been publicly disclosed. Dutch NCSC saw no reason to link this IT outage to the separate European supermarket refrigeration-controller campaign.
Why this severity: Major multinational grocery IT disruption with hundreds of millions of euros in expected Q4 sales/income impact; stores stayed open; no public confirmation of data theft as of Oct 19
- Started
- Oct 12, 2026
Affected
- Ahold Delhaize brand websites/apps and related IT systems in Benelux and the U.S.; Benelux supply-chain operations (exact systems not publicly detailed)
Fixed in
- No public technical patch: phased restoration; company says most disruption contained within about two weeks as of Nov 4 2026 guidance update, with work continuing to fully restore normal operations
Timeline4
SecurityWeek covers Ahold Delhaize's estimate of the financial toll of the October cyberattack.
Q3 results: estimates Q4 net sales reduced by €200–250M and underlying/IFRS operating income by €75–100M due to the October cyberattack; full-year guidance cut; Muller says most disruption contained within two weeks while restoration continues.
Company update: investigation confirms malicious actions; Dutch NCSC notified within 24 hours; formal police report filed; no evidence at that time of sensitive data theft; phased restoration of sites and apps underway.
Ahold Delhaize says it is experiencing a security issue in its network and takes some systems offline as a precaution; stores remain open.
Advisories3
News & write-ups1
Notes & caveats
Separate from french-supermarket-refrigeration-controller-attacks; Dutch NCSC saw no reason to link the Albert Heijn / Ahold Delhaize IT outage to the refrigeration campaign. Attack type not publicly disclosed.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
