INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Ahold Delhaize Disconnects Systems After Cyberattack

| 2026-10-13 09:37 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A cyberattack on Ahold Delhaize, a Dutch-Belgian grocery giant, prompted the company to disconnect some of its systems in response. The incident occurred in June 2025 when more than 2.2 million individuals' personal information was compromised in a ransomware attack. Stores in Belgium and the Netherlands were impacted by preventive measures taken by the company, while stores in the US also experienced issues. The current status is that Ahold Delhaize's teams are taking steps to assess and mitigate the issue, including disconnecting systems offline to protect them. However, it remains unclear if this incident is related to a separate cyberattack on refrigerators and freezers across Europe over the weekend.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
INC RansomINC Ransom
Target & Sectors
BENELUX BENELUX NORTH_AMERICA NORTH_AMERICA retailretail
Incident Timeline
‎November 2024
Threat actors used an unspecified method to target Ahold Delhaize's systems in November 2024, resulting in the disruption of services at multiple subsidiaries including Giant Food pharmacies and Hannaford supermarkets.
organisation Giant Food
In November 2024, Ahold Delhaize was hit by a cyberattack that impacted Giant Food pharmacies and Hannaford supermarkets, as well as Food Lion, The Giant Company, and Stop & Shop.
organisation Food Lion
In November 2024, Ahold Delhaize was hit by a cyberattack that impacted Giant Food pharmacies and Hannaford supermarkets, as well as Food Lion, The Giant Company, and Stop & Shop.
organisation The Giant Company
In November 2024, Ahold Delhaize was hit by a cyberattack that impacted Giant Food pharmacies and Hannaford supermarkets, as well as Food Lion, The Giant Company, and Stop & Shop.
organisation Stop & Shop
In November 2024, Ahold Delhaize was hit by a cyberattack that impacted Giant Food pharmacies and Hannaford supermarkets, as well as Food Lion, The Giant Company, and Stop & Shop.
‎April 2025
The INC Ransom ransomware group took credit for a cyberattack on Ahold Delhaize in April 2025, after which the company confirmed that data was stolen from its systems.
tactic Ransomware
In April 2025, just as the INC Ransom ransomware group took credit for the incident, the company confirmed that data was stolen from its systems.
threat_actor INC Ransom
In April 2025, just as the INC Ransom ransomware group took credit for the incident, the company confirmed that data was stolen from its systems.
‎June 2025
Ahold Delhaize disconnected its systems after a ransomware attack in June 2025 compromised the personal information of more than 2.2 million individuals.
target_region United States
In June 2025, Ahold Delhaize notified regulators in the US that the personal information of more than 2.2 million individuals had been compromised in the ransomware attack.
tactic Ransomware
In June 2025, Ahold Delhaize notified regulators in the US that the personal information of more than 2.2 million individuals had been compromised in the ransomware attack.
general_metric 2.2 individuals
In June 2025, Ahold Delhaize notified regulators in the US that the personal information of more than 2.2 million individuals had been compromised in the ransomware attack.
organisation iRhythm Data Breach Impacts
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation Oracle Health Data Breach Tally Climbs
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation Georgia Power
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
organisation Alabama Power Data Breach Hits
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
data_breach 20 Climbs
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
‎2026/10/13
Ahold Delhaize disconnected some of its systems in response to a cyberattack.
organisation Disconnect Systems
Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems.
organisation Delhaize
Ahold Delhaize said its stores remain open and that its ability to serve customers has not been affected.
organisation SecurityWeek
Responding to a SecurityWeek inquiry, an Ahold Delhaize spokesperson refrained from sharing additional details on the incident.
Tactical Metrics
Metrics
data_breach
20,000,000
Climbs
Related: iRhythm Data Breach Impacts at Least 360,000 People Related: Oracle Health Data Breach Tally Climbs to Nearly 20 Million Related: Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts Related:
Intelligence Sources
SecurityWeek 2026-10-13