Ahold Delhaize confirms cyberattack that disrupted services in Europe and the US

According to a BleepingComputer report dated 20 October 2026, food retailer Ahold Delhaize confirmed that a cyberattack the previous week disrupted store services in Europe and the US. Shoppers at Albert Heijn, Etos and Gall & Gall in the Netherlands and Delhaize in Belgium lost access to the brands' websites, apps and customer service channels. The company said it took some systems offline, while stores remained open.

• Albert Heijn's website and app are back online; home deliveries were expected to resume on Friday, 23 October.
• E-commerce in Belgium is fully operational, while e-commerce for the US brands was expected to return in the coming days.
• Within 24 hours of detecting the activity, the company informed the Dutch National Cyber Security Centre (NCSC); it also filed a formal report with Dutch police.
• So far the investigation has turned up no sign that sensitive data on customers, associates or partners was taken; the company shared no further details, and the report does not name the attacker or say whether ransomware was involved.

Why it matters

The report says the company has 9,551 stores and more than 384,000 employees, serving about 77 million customers a week across the US, Europe and Indonesia. The incident suggests that even when stores stay open, losing websites, apps and delivery channels can directly affect customers. Retail and e-commerce companies in Türkiye could benefit from defining in their incident response plans how online channels are safely shut down and restored and how authorities are notified.

Ahold Delhaize has now been hit by two major cyberattacks in recent years. In November 2024, attackers took data on more than 2.2 million people from its US systems, including personal, financial and health details; the INC Ransom group claimed that attack.