Ahold Delhaize takes Food Lion, Stop & Shop, Hannaford sites offline after cybersecurity incident
Websites and apps for five US banners and several European retail sites have been down for days as the parent company assesses and mitigates a network-wide security issue.
Ahold Delhaize, the Dutch supermarket giant behind a string of major food retail brands, has shut down websites and mobile apps across the United States and Europe after what it describes as a “cybersecurity issue.” The company confirmed the outage on Monday, after the network incident was detected over the preceding weekend. Among the affected US banners are Food Lion, Hannaford, Stop & Shop, and both Giant banners, while European sites including Albert Heijn, Delhaize, Etos, Gall & Gall, and bol.com are also unreachable.
Brick-and-mortar stores appear to have been left alone. The company said all of its stores remain open and that it is taking “precautionary measures to help protect them,” including taking some systems offline. Online grocery ordering and deliveries have been suspended, and Hannaford To Go pickup and delivery services are down, although the company says the impact of its defensive measures varies by brand. Ahold Delhaize has said its teams are “assessing and mitigating the issue,” and that as of midweek there is currently no evidence that customer or employee data was taken.
Why the scale of the outage matters
Ahold Delhaize is one of the world’s largest food retailers, operating major grocery chains across North America, Europe, and Latin America. Taking websites and ordering platforms offline simultaneously across multiple countries points to an incident in the shared corporate network rather than a problem isolated to one store or one banner. The decision to prioritize defensive containment over service continuity is itself a signal: the company has judged the threat to its systems more serious than the cost of leaving everyday customers unable to order online for days at a time. That pattern has become familiar in retail incident response, where companies routinely keep physical operations running while severing connectivity to limit an attacker’s foothold.
A repeat incident for the same company
This disruption comes nearly two years after Ahold Delhaize weathered a separate cybersecurity incident that forced some systems offline, knocked banner websites down, and temporarily suspended Hannaford’s e-commerce services. That 2024 breach potentially exposed sensitive information belonging to more than two million people. The repeated pattern is worth watching: retail groups consolidate e-commerce, loyalty, payments, and supplier connectivity on shared infrastructure, so a single compromise at the corporate layer can interrupt service for an entire family of brands at once, and the same architecture that enables scale keeps re-exposing the group to the same class of incident.
What is known so far
- A network security issue was detected on Sunday, October 11, and the company disclosed the shutdown on Monday, October 12.
- US banners with websites and apps offline include Food Lion, Hannaford, Stop & Shop, and both Giant banners.
- European sites that went unreachable include Albert Heijn, Delhaize, Etos, Gall & Gall, and bol.com.
- Physical stores and pharmacies remain open; online ordering, delivery, and pickup services are suspended, with impact varying by brand.
- The company reports no evidence that customer or employee data was stolen.
- As of October 14 the outage has run for several days, with systems only beginning to be restored.
A harder week for food retail
Ahold Delhaize’s incident is part of an unusually busy week for the food retail sector. A separate attack on French supermarket chains reportedly warmed the refrigerators and freezers of hundreds of stores to as much as 50 degrees Celsius overnight, causing fires and widespread food spoilage, with security experts pointing to unpatched internet-connected devices in stores as the likely weakness. Ahold Delhaize’s shutdown also follows a broader wave of attacks on European retail, while Kaseya’s weekly breach roundup reported a ransomware attack on SoftBank’s cloud subsidiary IDC Frontier affecting nearly 500 organizations across Japan, including internet service providers and public sector bodies. Taken together, the week shows food retail infrastructure under pressure in parallel: the online ordering layer, the IoT layer in store equipment, and the cloud services beneath both.
What this means for you
Shoppers using Food Lion, Stop & Shop, Hannaford, or Giant online services should expect the outages to persist, with websites and apps down while the parent company works through restoration; physical stores and pharmacies remain open for normal shopping. Because no data theft has been confirmed, there is no need to preemptively monitor for account fraud, but given that this same company has previously disclosed a data-exposing breach, it is prudent to watch for an official notification and avoid entering credentials on lookalike domains during the disruption. For security teams, the incident is a useful case study in dependency mapping: one compromise in shared corporate infrastructure took down the consumer-facing services of an entire brand family at once. Review how your e-commerce, loyalty, and supplier systems tie into your core network, and rehearse the communications path for the “we can’t say more yet” phase, which has now stretched across several days here.
Sources: Ahold Delhaize shuts down websites after cybersecurity issue — Supermarket News; Ahold Delhaize USA banners remain offline — Grocery Dive; The Week in Breach News: October 14, 2026 — Kaseya.
Corrections: Report an error at corrections@wireshaman.com.