OrganisationNL

Ahold Delhaize

Dutch-Belgian food retail group running supermarket brands in Europe and the US.

Ahold Delhaize is a Dutch-Belgian food retailer formed in 2016 that operates 17 local grocery and e-commerce brands across nine countries.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

How much disruption did Ahold Delhaize contain by taking systems offline?

Timeline for Ahold Delhaize

#15 19 Oct

Confirmed its brand outages were deliberate

Cybersecurity: Threats and Defences: Ahold Delhaize confirms attack on brands

View full timeline →

Follow Cybersecurity: Threats and Defences →

Background

Koninklijke Ahold Delhaize N.V. is a Dutch public company operating grocery shops and e-commerce services in Europe and the United States. The group was formed in 2016 through the merger of Ahold and Belgium's Delhaize Group. It runs 17 local brands across nine countries.

The group's model keeps familiar supermarket names in individual markets while placing them under one listed parent. Its operating channels include physical shops, distribution networks, websites, mobile apps, online ordering and delivery. Those channels connect local retail brands to shared group ownership across a large international footprint. Food retail and e-commerce form the group's core business.

Common Questions

What is known about sensitive data loss at Ahold Delhaize?

As of 19 October 2026, Ahold Delhaize said its ongoing investigation had found no evidence that sensitive customer, associate or partner data was taken.Source: Ahold Delhaize

What Ahold Delhaize brands did the cyber incident affect?

The company said most brands across Europe and the United States were affected to varying degrees. Named affected brands included Food Lion, Stop & Shop, Albert Heijn, Etos and Gall & Gall.Source: Ahold Delhaize

What happened to Ahold Delhaize's online services?

Ahold Delhaize took websites, apps and other systems offline after detecting malicious activity. Most European and US brands were affected, although stores stayed open.Source: Ahold Delhaize

Who runs Ahold Delhaize?

Frans Muller is Ahold Delhaize's president and chief executive. He has held the top role since 1 July 2018.Source: Ahold Delhaize

Source Material

Ahold Delhaize update on status of cybersecurity incident Our family of great local brands About Ahold Delhaize

How the World Sees Them

FirstVDS

There are no traces of the attack on the affected virtual servers

ESET

first documented case of Yggdrasil being abused in this way by a state-aligned threat actor

Cyber Security Agency of Singapore

Attackers are exploiting

Canadian Centre for Cyber Security

open-source reporting indicating that the vulnerability is being exploited in the wild

Ahold Delhaize (Frans Muller)

was caused by the malicious actions of others

ENISA

the manufacturer is not required to comply with the vulnerability handling obligations

CERT-FR (ANSSI)

probablement toujours en cours

ASOS

impersonating a trusted contact

Check Point

actively exploited on Spark Firewalls as of September 12, 2026

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.