Retail giant Ahold Delhaize takes systems offline after cyberattack
Retail giant Ahold Delhaize takes systems offline after a cybersecurity incident.
Run Ahold Delhaize?
Get an email when a reviewed story names Ahold Delhaize, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Ahold Delhaize, a global food retail chain, has confirmed a cybersecurity incident that forced them to take some systems offline. The incident has caused disruptions for employees and customers, affecting access to schedules, pay stubs, websites, and apps across various brands and regions. This marks the second major cybersecurity event for the company in recent years, following a 2024 ransomware attack.
The lesson from this incident
Full lessonAhold Delhaize suffered a significant cyberattack that forced the shutdown of multiple systems, disrupting employee and customer-facing services across several brands and regions. The fact that this is the company's second major cybersecurity incident in recent years suggests that lessons from the previous ransomware attack were not fully applied or that residual vulnerabilities remained unaddressed. Taking systems offline is a necessary containment measure, but the widespread impact on schedules, pay stubs, websites, and apps indicates insufficient network segmentation between critical and non-critical systems. This incident highlights that large retail organizations with complex, multi-brand IT environments are high-value targets and must continuously mature their cyber resilience posture — not just respond reactively after breaches occur.
What helps against this
How we list vendors- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
- malware — INC Ransom