AHOLD Delhaize faced a cyberattack that caused a disruption to its online services, including orders and deliveries across Europe and the United States. The company took its systems offline on 12 October 2026 as a precautionary measure after detecting a security issue within its network. Stores across its brands remained open while the phased restoration of systems and services began to reconnect online platforms.
By 20 October, the company stated that many European websites and applications had been restored and that Albert Heijn in the Netherlands was expected to resume home deliveries by Friday, with US e‑commerce brands anticipated to come back online in the coming days.
Ahold Delhaize said there was no evidence that customer, associate, or partner data was stolen during the incident. It notified the Dutch National Cyber Security Centre (NCSC) and relevant authorities promptly and filed a police report in the week of the disruption. The company emphasised that the offline measures helped protect systems and that the restoration was proceeding in a controlled, phased manner to support the distribution of groceries to customers as quickly as possible.
While the specifics of the attack have not been disclosed, the organisation reaffirmed that its operations continued to function at the point of sale and that stores remained open throughout the incident.