NewsPublished 6 Nov 2026

Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack

Source SecurityWeek

Description

In October 2026, Ahold Delhaize, a major Dutch-Belgian grocery retailer, suffered a cyberattack that disrupted operations in the US and Benelux regions. The incident led to significant financial impacts, including an estimated reduction of €200 million to €250 million in fourth-quarter net sales and a €75 million to €100 million hit to operating income. The company temporarily disconnected some systems to contain the attack, affecting online capabilities and supply-chain operations. No evidence of data theft was reported at the time. The attack caused the company to lower its 2026 financial outlook. The specific attack type has not been disclosed.

Impact

The cyberattack caused significant operational disruption, particularly affecting online capabilities and supply-chain operations in the US and Benelux. Financially, it is estimated to reduce fourth-quarter net sales by €200 million to €250 million and operating income by €75 million to €100 million. The incident led to a downward revision of the company's 2026 earnings and cash flow forecasts. There is no confirmed data breach or theft reported from this incident. Incident response and remediation costs are expected but are not projected to materially affect the company's 2026 operating income.

Defensive guidance

Ahold Delhaize disconnected affected systems as part of its incident response protocols to contain the attack and protect its IT environment. The company continues to work on fully restoring normal operations. No further specific mitigation actions are disclosed. Since the attack type and vulnerability exploited are not publicly known, no targeted mitigation recommendations can be provided. Organizations should monitor official communications from Ahold Delhaize for updates and remediation guidance.

Summary

Ahold Delhaize experienced a cyberattack in October 2026 that disrupted its operations primarily in the US and Benelux markets. The company took some systems offline as a precautionary measure, which affected online services and supply-chain functions. Financially, the attack is expected to reduce fourth-quarter net sales by up to €250 million and operating income by up to €100 million. The incident response and remediation costs are expected to have minimal impact on 2026 IFRS operating income. The company revised its 2026 earnings and cash flow guidance downward due to the attack and other factors. No details about the attack vector or method have been disclosed, and there is no evidence of customer or partner data compromise. This is not the first cyber incident for Ahold Delhaize, which faced a ransomware attack in 2024 that compromised personal data of over 2.2 million people.

References

securityweek.com/grocery-giant-ahold-delhaize-estimates-financial-toll-of-october-cyberattack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 6 Nov 2026, 13:03 UTC

Technical details

References

Community reviews