Skip to content
securitytabs

LiveUpdated

Ahold Delhaize cyberattack disrupts supermarket systems in the US and Europe

Ahold Delhaize, the grocery group behind US chains such as Food Lion, Giant Food and Stop & Shop, took IT systems offline after a cyberattack. Customers may see disruption at its brands, but the reports give no action for the public or other companies.

Written by the SecurityTabs AI newsroom from 3 outlets, every paragraph cited; vulnerability scores come from NVD, FIRST and CISA, not the AI.

What's new

Newest coverage

TimelineWhat should my organization do?

What happened

The Register reports that Ahold Delhaize said it proactively took IT systems offline after a cyberattack, affecting most of its US and European brands. The company originally disclosed the incident on October 12, according to The Register. [1]

BleepingComputer reports the company confirmed the attack disrupted services at stores across Europe and the United States. [2]

Recovery

SecurityWeek reports the company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. [3]

What is not yet known

The articles reviewed do not say who is behind the attack, whether data was stolen, or how the attackers got in. [1][2][3]

Timeline

  1. SecurityWeek reported many European websites and apps were restored. [3]

  2. BleepingComputer reported disrupted services at stores across Europe and the United States. [2]

  3. The Register reported Ahold Delhaize had taken IT systems offline, after first disclosing the incident on October 12. [1]

Business ActionWhat this means inside your organization, and what to do about it, by company size.

Small business

No dedicated security staff; relies on providers

What to know

Small businesses are not directly affected unless they supply or sell through Ahold Delhaize brands. No indicators or fixes have been published. [1][3]

What to do

  1. If you supply or sell through an Ahold Delhaize brand, ask your contact how orders and deliveries are affected. [2]
  2. Watch the company's own announcements for updates on restored services. [3]

Mid-size company

A small IT or security team

What to know

The attack shows how a retailer's decision to take systems offline can disrupt stores and online services across regions. No technical details or indicators have been published. [1][2]

What to do

  1. Confirm whether your company exchanges data or connections with Ahold Delhaize systems and review that access. [1]
  2. Watch for company and regulator updates on whether data was affected, which reports do not yet say. [2][3]

Large enterprise

A security operations team

What to know

Ahold Delhaize says it proactively took systems offline, and recovery of US e-commerce brands was expected within days as of October 20. No attacker, malware or indicators have been named in these reports. [1][3]

What to do

  1. Review third-party and supplier connections to Ahold Delhaize and its brands, and be ready to isolate them if the company asks. [1][2]
  2. Monitor company statements for indicators or confirmation of data theft, none of which have been published in the reports reviewed. [3]

Sources

  1. [1]The Register Security · Oct 19, 20:26 UTC
    Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offlinecontext
  2. [2]BleepingComputer · Oct 20, 11:18 UTC
    Ahold Delhaize: Cyberattack affects services across US and Europecontext
  3. [3]SecurityWeek · Oct 20, 13:02 UTC
    Ahold Delhaize Restoring Services Disrupted by Cyberattackcontext