Cybersecurity Incident Disrupts Online Services for Major US Grocery Chains

Ahold Delhaize confirmed on October 12 that a cybersecurity incident has disrupted online services, including ordering and digital coupons, for several of its major U.S. supermarket chains. The disruption has affected Stop & Shop, Food Lion, Hannaford, and the Giant Food and Giant Company chains.

Physical stores under these banners have remained operational, but customers have encountered interruptions to their online shopping experiences. The Netherlands-based Ahold Delhaize, which operates more than 9,400 stores globally, stated that it took certain systems offline as a precautionary measure while its security teams investigated the issue. "Our teams are taking steps to assess and mitigate the issue," the company said in a statement. "This includes taking some systems offline to help protect them."

As of October 14, websites and mobile applications for the affected chains were still experiencing downtime, marking at least three days of disruption. Customers reported issues accessing online ordering, digital coupons, and loyalty features. While Ahold Delhaize began a controlled relaunch of some systems on October 13, a firm timeline for the complete restoration of all services had not been announced.

Customers relying on online grocery pickup or delivery services have faced significant inconveniences. For those with mobility challenges or limited transportation, the outage can create a serious hurdle. In response, Food Lion, Giant Food, and The Giant Company have directed customers to third-party delivery services such as Instacart, DoorDash, and Uber Eats where available.

Regarding unfulfilled online orders, the affected chains have stated that customers will receive refunds. Shoppers are advised to monitor their financial accounts for the return of funds and to contact customer service if refunds do not appear within the expected processing period.

While the investigation into the incident continues, Ahold Delhaize has reported no evidence at this time that customer, employee, or partner data was compromised. However, the preliminary findings do not definitively rule out data theft, and the investigation is ongoing. The company has not publicly identified the cause of the incident or confirmed whether ransomware was involved.

This latest incident raises concerns due to a previous major data breach suffered by Ahold Delhaize in November 2024. That breach exposed personal information of over 2.2 million individuals, including names, contact details, Social Security numbers, driver's license and passport numbers, financial account information, and health information from employment records. The ransomware group INC Ransom claimed responsibility for that earlier attack.

In light of these repeated cybersecurity events, shoppers are advised to remain vigilant. Precautions include watching for fake refund messages, reviewing financial accounts for suspicious charges, securing online grocery account passwords with unique, strong passwords and enabling two-factor authentication, and being wary of unexpected security alerts. Monitoring financial accounts and personal information remains a smart practice, with alerts from banks and credit card providers recommended. Customers should also check receipts for any discounts that may have been missed due to the outage and take immediate action if they believe they have clicked on a suspicious link or downloaded a malicious file.