Technology · NEWS EXPLAINER
Ahold Delhaize reports cyber incident to Dutch police as delivery outage continues
The retailer says its investigation found malicious actions, while Albert Heijn deliveries remain paused and several US brand websites are still recovering.
Ahold Delhaize said on October 19 that it had reported a cybersecurity incident to Dutch police after finding the suspicious activity resulted from malicious actions by others. The company had taken systems offline earlier in the month as a precaution.
The update sharpens the description of the incident but leaves key questions open. No attacker or method has been named, the investigation continues, and the company says it has no evidence that customer data was taken.
What changed on October 19
Ahold Delhaize said it reported the incident to Dutch police after its investigation concluded that the suspicious activity resulted from malicious actions by others. That is a material update from the company’s earlier description of a security issue whose cause remained under investigation.
Online grocery disruption is still the clearest customer impact
Albert Heijn said online deliveries would not resume before Thursday at the earliest, extending the outage to at least 11 days. Reuters reported that the chain’s website was back, while several US brand websites remained offline; Belgian Delhaize deliveries had resumed.
Stores stayed open, but back-end systems matter
Physical stores across the group continued serving shoppers. Even so, Reuters reported supply difficulties after distribution channels were affected, showing why taking digital systems offline can spill into inventory flow even when checkout lanes remain open.
What is known about data and attribution
The company has said there is no evidence that customer, associate or partner data was taken. That is not the same as a final finding: the investigation remains ongoing, and Ahold Delhaize has not publicly identified an attacker or disclosed the intrusion method.
The French supermarket attack is not established as connected
The incident overlapped with a separate attack that disrupted refrigeration systems at hundreds of French supermarkets. Dutch authorities said there was no reason to believe the Dutch incident was directly linked, so the two events should not be merged into a single campaign without new evidence.
