[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7dfafYna6oBmCYsRjxE9c6C_N3Oq49e1au20AEh5fy8":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"3a0cb0b3-029e-450b-a691-a5b6276ad6a3","Cyberattack Prompts Ahold Delhaize to Disconnect Systems","cyberattack-prompts-ahold-delhaize-to-disconnect-systems-44ed78","The company says it took some of its systems offline to contain a security issue within its network. The post Cyberattack Prompts Ahold Delhaize to Disconnect Systems appeared first on SecurityWeek.","Grocery giant Ahold Delhaize has taken some of its IT systems offline to contain a cyberattack. The company stated that its stores remain operational, but local media reports indicate that deliveries and online orders have been affected in Belgium and the Netherlands. This incident follows a previous ransomware attack in November 2024 that compromised the personal information of over 2.2 million individuals.","Ahold Delhaize disconnects systems due to a cyberattack, impacting deliveries and online orders.","https:\u002F\u002Fwww.securityweek.com\u002Fcyberattack-prompts-ahold-delhaize-to-disconnect-systems\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F11\u002FAhold-Delhaize-cyberattack.jpeg","2026-10-13T09:37:12+00:00","2026-10-13T10:00:15.808415+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Ahold Delhaize","vendor",{"name":21,"type":22},"Giant Food pharmacies","product",{"name":24,"type":22},"Hannaford supermarkets",{"name":26,"type":22},"Food Lion",{"name":28,"type":22},"The Giant Company",{"name":30,"type":22},"Stop & Shop","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":31,"icon":33,"name":34,"slug":35},null,"Breaches","breaches",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,24],{"controls":52,"vendors":140},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":83,"name":84,"problem":85,"products":86},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"slug":112,"name":113,"problem":114,"products":115},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":156},"ahold-delhaize-disconnects-systems-after-repeat-cyberattack","Ahold Delhaize Disconnects Systems After Repeat Cyberattack","Ahold Delhaize suffered a cyberattack severe enough to force the deliberate disconnection of IT systems — a reactive containment measure that itself disrupted deliveries and online orders across Belgium and the Netherlands. The incident is compounded by the fact that the company experienced a ransomware attack just months earlier in November 2024, which exposed the personal data of over 2.2 million individuals, suggesting that post-incident remediation was incomplete or insufficiently hardened. Repeated attacks on the same organization signal a failure to fully address root causes after the first breach, including likely gaps in network segmentation, threat monitoring, and data protection controls. This matters because operational disruption at a large grocery retailer has real-world supply chain consequences for consumers, and repeated data exposures carry significant regulatory liability under GDPR. Organizations must treat a first incident as an urgent signal to overhaul — not just patch — their security posture.",[146,147,148,149,150,151,152,153,154,155],"NIST CSF: RS.RP-1 (Response Planning)","NIST CSF: PR.AC-5 (Network Integrity \u002F Segmentation)","NIST SP 800-61 Rev. 2 (Computer Security Incident Handling Guide)","CIS Control 12: Network Infrastructure Management","CIS Control 17: Incident Response Management","CIS Control 3: Data Protection","GDPR Article 32 (Security of Processing)","GDPR Article 33 (Notification of Personal Data Breach)","ITIL: Problem Management (root cause analysis after repeated incidents)","ISO\u002FIEC 27035: Information Security Incident Management",{}]