[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHAiuRqmPFaCOgsETLsO77Dzkb6TYXkSs5Xw7-vABvA4":3},{"article":4,"iocs":38,"watch_terms":43,"solutions":44,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"504db431-46c5-432e-9911-d3d932b1a110","Retail giant Ahold Delhaize takes systems offline after cyberattack","retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack-58f28d","Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a \"cybersecurity incident\" affecting its network. [...]","Ahold Delhaize, a global food retail chain, has confirmed a cybersecurity incident that forced them to take some systems offline. The incident has caused disruptions for employees and customers, affecting access to schedules, pay stubs, websites, and apps across various brands and regions. This marks the second major cybersecurity event for the company in recent years, following a 2024 ransomware attack.","Retail giant Ahold Delhaize takes systems offline after a cybersecurity incident.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fretail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F12\u002FAhold_Delhaize.jpg","2026-10-12T13:51:07+00:00","2026-10-12T14:00:12.991995+00:00",7,[17],{"name":18,"type":19},"Ahold Delhaize","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,28,33],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39],{"type":40,"value":41,"context":42},"malware","INC Ransom","Ransomware group that claimed a previous attack on Ahold Delhaize in November 2024.",[18],{"controls":45,"vendors":133},[46,75,104],{"slug":47,"name":48,"problem":49,"products":50},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[51,59,67],{"vendor_slug":52,"vendor_name":53,"vendor_logo":54,"product_slug":55,"product_name":56,"url":57,"description":58},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":76,"name":77,"problem":78,"products":79},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"slug":105,"name":106,"problem":107,"products":108},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":150},"ahold-delhaize-hit-by-repeat-cyberattack-systems-taken-offline","Ahold Delhaize Hit by Repeat Cyberattack, Systems Taken Offline","Ahold Delhaize suffered a significant cyberattack that forced the shutdown of multiple systems, disrupting employee and customer-facing services across several brands and regions. The fact that this is the company's second major cybersecurity incident in recent years suggests that lessons from the previous ransomware attack were not fully applied or that residual vulnerabilities remained unaddressed. Taking systems offline is a necessary containment measure, but the widespread impact on schedules, pay stubs, websites, and apps indicates insufficient network segmentation between critical and non-critical systems. This incident highlights that large retail organizations with complex, multi-brand IT environments are high-value targets and must continuously mature their cyber resilience posture — not just respond reactively after breaches occur.",[139,140,141,142,143,144,145,146,147,148,149],"CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 12: Network Infrastructure Management","CIS Control 17: Incident Response Management","NIST SP 800-61: Computer Security Incident Handling Guide","NIST IR-4: Incident Handling","NIST CP-9: System Backup","NIST SC-7: Boundary Protection (Network Segmentation)","ISO\u002FIEC 27001:2022 – Annex A 5.26: Response to Information Security Incidents","ITIL 4: Problem Management (preventing recurrence)","GDPR Article 32: Security of Processing","GDPR Article 33: Notification of a Personal Data Breach",{}]