Ahold Delhaize’s recent cybersecurity incident has disrupted online services at several major U.S. grocery chains, raising concerns about customer data security and the reliability of digital shopping.
Ahold Delhaize, the parent company of several prominent U.S. grocery chains, has experienced a significant cybersecurity incident that has impacted online ordering and digital coupon services at its stores, including Stop & Shop, Food Lion, Hannaford, and Giant Food. Customers attempting to access their grocery store apps or websites have encountered disruptions, leaving many unable to place orders or utilize digital discounts.
The incident, confirmed by Ahold Delhaize on October 12, prompted the company to take certain systems offline to protect its operations while security teams investigate the issue. Although physical stores remain open, the disruption to online services has raised concerns among shoppers who rely on these digital platforms for their grocery needs.
This situation is particularly alarming given that Ahold Delhaize suffered a major data breach in 2024, which exposed personal information of over 2.2 million individuals. As investigators work to understand the current incident, many customers are left wondering if their personal data is at risk once again.
As of October 14, reports indicate that the websites and mobile apps for the affected grocery chains were still unavailable, marking at least three consecutive days of online disruptions. Customers have faced challenges accessing online ordering, digital coupons, and app-based loyalty features. Ahold Delhaize announced on October 13 that it was beginning a controlled relaunch of certain systems, but a firm timeline for restoring all affected services has not been provided.
Despite the online disruptions, Ahold Delhaize confirmed that its supermarkets across Europe and the United States remained open and operational. Pharmacies within these stores have also continued to function during their regular business hours. However, customers have reported significant interruptions to grocery pickup and delivery services, which can be particularly inconvenient for those with mobility challenges or limited transportation options.
For customers who placed online orders that were not fulfilled, Ahold Delhaize has stated that refunds will be issued. Shoppers are advised to keep their original order confirmations and any related emails, and to monitor their credit card or bank accounts for refunds. If a refund does not appear within the retailer’s stated processing period, customers should reach out to customer service through verified channels.
On October 13, Ahold Delhaize provided an update indicating that it was working with external cybersecurity experts to investigate the incident. A spokesperson for the company assured that teams were working diligently to restore systems safely, including the websites. However, the company has not disclosed the cause of the problem or whether ransomware was involved, leaving many questions unanswered regarding the nature of the incident and the timeline for full restoration of services.
While Ahold Delhaize has reported no evidence of customer, employee, or partner data being compromised during this incident, the investigation is ongoing. Shoppers are encouraged to remain vigilant, as the preliminary findings do not definitively rule out the possibility of data theft. The lack of confirmed data breaches, however, does not alleviate concerns, especially given the company’s recent history with cybersecurity issues.
In November 2024, Ahold Delhaize faced a significant breach that allowed hackers to access sensitive personal information. The breach affected approximately 2.24 million individuals, primarily current or former employees and their dependents. Although the company stated that customer payment and pharmacy systems were not compromised during that attack, the involvement of the ransomware group INC Ransom raised alarms about the security of Ahold Delhaize’s systems.
As grocery shopping increasingly involves digital accounts, saved payment details, and loyalty programs, the implications of a cybersecurity incident extend beyond mere inconvenience. Ahold Delhaize now faces the dual challenge of restoring its online services and addressing customer concerns about the security of their personal information in light of two major incidents in less than two years.
In the wake of this incident, customers are advised to take precautions to protect their information. Scammers often exploit such situations by sending convincing emails or text messages that claim customers need to verify payment information to receive refunds. It is crucial for shoppers to avoid clicking on unexpected links and to verify any communications through official retailer channels.
Regularly checking financial accounts for unfamiliar charges and enabling transaction alerts can help customers stay informed about their accounts. Additionally, using unique passwords for grocery accounts and enabling two-factor authentication can provide an extra layer of security against unauthorized access.
As Ahold Delhaize continues to investigate the recent cybersecurity incident, customers are left with lingering questions about the security of their data and the reliability of the company’s online services. With the grocery industry increasingly reliant on digital platforms, restoring customer confidence will be essential for Ahold Delhaize moving forward.
As of now, Ahold Delhaize has not confirmed whether customer data was stolen during this latest incident, but shoppers are encouraged to remain cautious and vigilant. The company has stated that it will provide updates as more information becomes available, and customers are urged to stay informed about the situation.
For further insights, refer to Grocery Dive.