You pull out your phone to check your grocery store’s digital coupons or place an order for dinner. Suddenly, the app won’t open. The website is unavailable, and the groceries you were counting on for tonight may never arrive. For anyone who depends on online grocery shopping, that’s a frustrating problem.
That’s the situation shoppers encountered this week at several major U.S. supermarket chains. A cybersecurity incident at grocery giant Ahold Delhaize forced the company to take some systems offline. The disruption affected Stop & Shop, Food Lion, Hannaford and the Giant supermarket chains. The company says its physical stores have remained open, although customers have experienced interruptions to online services.
There’s another reason this story deserves attention. The same company suffered a major data breach in 2024 that exposed personal information belonging to more than 2.2 million people. So, as investigators work to understand the latest incident, shoppers have a reasonable question: Could their personal information be at risk again?
CHICK-FIL-A DATA BREACH EXPOSES CUSTOMER ACCOUNTS
Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money
In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.
Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.
FRENCH SUPERMARKETS FACE MILLIONS IN LOSSES AFTER CYBERATTACK HITS REFRIGERATORS NATIONWIDE
On Oct. 12, Ahold Delhaize confirmed a cybersecurity issue within its network. The Netherlands-based company owns some of America’s best-known regional supermarket chains and operates more than 9,400 stores worldwide. The company took certain systems offline to protect its operations while security teams investigated the problem. In its official statement, Ahold Delhaize said: “Our teams are taking steps to assess and mitigate the issue. This includes taking some systems offline to help protect them.”
The company serves approximately 60 million customers each week across its international businesses. Consequently, a problem involving its technology can affect grocery shopping far beyond a single store.
The cybersecurity incident has disrupted online services for five major U.S. supermarket chains:
According to Grocery Dive, websites and mobile apps for all five chains were still unavailable on the morning of Wednesday, Oct. 14. That marked at least the third consecutive day of online disruptions. Customers have encountered problems accessing online ordering and digital coupons. Some app-based loyalty features have also been unavailable. In its Oct. 13 update, Ahold Delhaize said it was beginning a controlled relaunch of certain systems. However, as of Oct. 14, the company had not announced a firm timetable for restoring all affected services.
Yes. In its Oct. 13 statement, Ahold Delhaize confirmed that its supermarkets across Europe and the United States remained open and were serving customers. Notices from the affected U.S. chains also indicated that pharmacies were operating during their normal business hours. However, online shopping has experienced significant disruptions. Customers have faced interruptions to grocery pickup and delivery services. Meanwhile, shoppers who rely on digital coupons have encountered problems accessing their usual discounts.
As of Oct. 14, Food Lion, Giant Food and The Giant Company also directed customers to third-party delivery services, including Instacart, DoorDash and Uber Eats, where available. For customers who depend on grocery delivery because of mobility challenges or limited transportation, these disruptions can create a serious inconvenience.
If you placed an online grocery order that was never fulfilled, the affected supermarket chains said customers would receive refunds for those orders. However, it’s worth checking your credit card or bank account to make sure the refund actually arrives.
Keep your original order confirmation and any emails related to the purchase. If the refund doesn’t appear within the retailer’s stated processing period, contact customer service through a verified channel. If your grocery app remains unavailable, shopping inside a physical store may be your most dependable option. Still, consider calling ahead if you need a specific service or want to confirm that a prescription is ready.
On Oct. 13, Ahold Delhaize issued a statement, updated Oct. 14, saying it was in the process of starting a controlled relaunch of certain systems. The company said it was working with external cybersecurity experts and appropriate authorities to investigate the incident. In a direct response to CyberGuy, an Ahold Delhaize USA spokesperson provided an update on efforts to restore affected services. “Please know our teams are working as quickly as possible to restore systems safely that we took offline as a precautionary measure, including our websites,” the spokesperson told CyberGuy.
The spokesperson also confirmed that stores remain open and apologized for the disruption to customers. However, Ahold Delhaize has not publicly identified who caused the problem or explained how its network was compromised. It has also not confirmed whether ransomware played a role. That leaves several important questions unanswered, including how the incident began and when all affected services will be restored. The company has not provided a firm timetable for full restoration.
This may be the biggest concern for shoppers who have online grocery accounts. In its statement, Ahold Delhaize said investigators had found no evidence at that point that customer, employee or partner data was taken during the incident. That’s encouraging for shoppers who have provided personal information to these supermarket chains. However, investigators were still examining the incident as of that update. The company’s preliminary findings do not definitively rule out data theft. As of Oct. 14, Ahold Delhaize had not confirmed that personal information was stolen during this latest incident. That means shoppers should remain alert without assuming their personal information has been compromised.
Unfortunately, this isn’t the first major cybersecurity incident involving Ahold Delhaize. In November 2024, hackers gained unauthorized access to internal U.S. business systems operated by Ahold Delhaize USA Services. The attackers obtained files containing sensitive personal information. The company eventually disclosed that more than 2.2 million people were affected. According to a filing with the Maine Attorney General, the breach involved approximately 2.24 million individuals. In a June 2025 breach notification, the company explained that the stolen information varied by person.
Exposed records could include:
The vast majority of those affected were current or former employees, along with their dependents and beneficiaries. The company said it had no indication that customer payment or pharmacy systems were compromised during the 2024 attack. The ransomware group INC Ransom claimed responsibility for the earlier incident. However, Ahold Delhaize did not publicly confirm the group’s involvement. There is currently no confirmed connection between that attack and the October 2026 cybersecurity incident.
For many of us, grocery shopping now involves much more than walking into a store with a shopping list. We create accounts, save payment details and use loyalty programs to access discounts. Some families depend on online ordering every week. When a supermarket chain experiences a cybersecurity incident, those conveniences can suddenly disappear. For Ahold Delhaize, the challenge now extends beyond restoring its apps. The company also faces questions about the security of its systems after experiencing two major incidents in less than two years. Customers deserve to understand what happened once investigators have reliable answers.
Even without confirmed customer data theft, a widely reported cybersecurity incident can give scammers opportunities to target shoppers. These seven precautions can help you protect your information and avoid additional headaches.
Scammers may send emails or text messages claiming that you need to verify your payment information to receive a grocery refund. Those messages can seem especially convincing if you’ve recently had an order canceled. Avoid clicking unexpected refund links. Instead, review your original payment account or contact the retailer using a verified phone number. Never provide your banking password or pay a processing fee to receive a refund.
If you placed an order around the time of the outage, check whether the store charged you for groceries you never received. Save your confirmation emails and keep any receipts. Then, review your account for a refund. If the money doesn’t appear within the retailer’s stated processing period, contact customer service or your payment provider.
If you reuse your grocery account password on other websites, replace it with a unique one. A password manager can generate and store strong passwords without forcing you to remember each one. Also, enable two-factor authentication (2FA) if your grocery account supports it. That gives your account another layer of protection against unauthorized access.
A real cybersecurity incident gives scammers an opportunity to send convincing fake breach notifications. You might receive a message claiming that your grocery account has been compromised and that you must immediately verify your identity. Before entering personal information, confirm the alert through the retailer’s official communications.
Although Ahold Delhaize reported no evidence of data theft in its Oct. 14 update, regularly checking your financial accounts remains a smart precaution. Enable transaction alerts through your bank or credit card provider. Pay attention to unfamiliar charges or unexpected account activity.
If you normally use your grocery store’s app to access digital coupons or loyalty rewards, check your receipt carefully. Some discounts may be unavailable while the retailer’s online services are down. Before checking out, ask a store employee whether there’s another way to receive an advertised discount. Keep your receipt if you believe you were overcharged so you can request an adjustment when customer service becomes available.
If you clicked a suspicious grocery refund or security alert link, your next steps depend on what information you shared. If you entered your password, change it immediately through the retailer’s official website once it’s available. Update any other accounts using that password. If you provided credit card or banking information, contact your financial institution and ask about securing your account. You can also report suspected fraud to the Federal Trade Commission at reportfraud.ftc.gov. If you downloaded a suspicious attachment, run a security scan using strong antivirus software on your device. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
I find it troubling that a company responsible for feeding millions of American families is dealing with another major cybersecurity incident so soon after its last one. We depend on grocery stores for something as basic as putting dinner on the table. Increasingly, those stores also want us to use their apps to access the best prices and place orders. What concerns me is how quickly those everyday conveniences can disappear when something goes wrong with a retailer’s technology. And after the 2024 breach exposed personal information belonging to more than 2.2 million people, I think Ahold Delhaize has some serious questions to answer. I’d like to know what caused this latest incident and whether the company addressed weaknesses identified after the previous attack. Those answers could go a long way toward restoring customer confidence. As of the company’s October 14 update, investigators had found no evidence that customer, employee or partner data was taken in the latest incident. That’s reassuring, although the investigation continues. In the meantime, you should remain cautious about unexpected refund messages or suspicious security alerts.
If your grocery store suffered two major cybersecurity incidents in less than two years, would you still trust it with your personal information, or would you take your business somewhere else? Let us know by writing to us at CybergGuy.com.
Sign up for my FREE CyberGuy Newsletter
Copyright 2026 CyberGuy.com. All rights reserved.
