Ahold Delhaize takes some systems offline after a cyber incident
Ahold Delhaize, which runs over 9,400 stores in Europe, the US and Indonesia, said on October 12, 2026 that it was dealing with a security issue on its network and switched off some systems as a precaution. Stores stayed open, but websites and apps faltered in the Netherlands and Belgium. On October 13 the company said it was starting a controlled restart of certain systems.
A statement first, then part of the estate went dark
On October 12, 2026 Ahold Delhaize used its corporate newsroom to announce precautionary measures following a cybersecurity incident. Its statement, quoted by BleepingComputer, opened plainly: "Ahold Delhaize is experiencing a security issue within its network." The company said its teams were assessing the problem and trying to contain it, and that some systems had been pulled offline to protect them. It also stressed that shoppers could still walk in: "At this time, our stores are open and serving customers."
A day later, on October 13, an update added more texture. The company acknowledged that its own measures had disrupted customers, employees and partners, and said the effect differed from brand to brand. As the teams made progress, it said, a controlled re-launch of certain systems was getting under way, while stores in Europe and the United States remained open.
Shelves open, digital channels stalled
The visible damage surfaced through customers and staff. Linking to a report by Dutch broadcaster NOS, BleepingComputer said that shoppers at Albert Heijn, Etos and Gall & Gall in the Netherlands, and at Delhaize in Belgium, could not get their websites, apps or customer service channels to work. In the US, an internal Food Lion memo shared by employees described the event as an IT outage and warned that stores might not be able to pick, prepare or hand over orders. Stop & Shop employees, the same report said, struggled to reach their schedules and pay stubs.
The company kept its answers short. When BleepingComputer asked whether corporate and store systems were both hit, whether disruption reached stores worldwide and whether any devices were encrypted, a spokesperson simply pointed back to the published statement. The October 13 update said further details would be withheld so as not to weaken security measures or hamper the response. Ahold Delhaize said it was working with internal teams and outside cybersecurity specialists and was in contact with the relevant authorities. On data, it said the investigation continues but that it has "no evidence at this moment that customer and associate data was taken".
The scale is huge, and it has happened before
According to BleepingComputer, the group operates more than 9,400 local stores across three regions, employs close to 400,000 people and serves roughly 60 million customers a week. Its European banners include Delhaize, Maxi, Mega Image, Albert, bol, Alfa Beta, Etos, Gall & Gall and Profi, and its American ones Food Lion, Stop & Shop, Giant Food and Hannaford. At that size, switching off even part of the system is felt in online ordering, customer service and staff tools, even when the doors stay open.
Nor is this the company's first serious incident in recent years. BleepingComputer recalls that in November 2024 the ransomware group INC Ransom hit Ahold Delhaize's US systems and stole personal, financial and health data belonging to more than 2.2 million people. This time the type of attack, the attacker and the root cause have not been made public, and the company says it will hold back details while the investigation runs.
The sources say nothing about Türkiye, so this section is commentary
None of the sources mention Türkiye. Ahold Delhaize's statements refer to its stores in Europe and the United States, and the disruption BleepingComputer reports involves brands in the Netherlands, Belgium and the US. There is no information on any disruption affecting consumers or businesses in Türkiye, so this section is UNALSOFT commentary, not sourced fact.
Our reading: the stores stayed open, yet the customer's contact through websites, apps and service channels broke down. For Turkish SMBs and online shops that earn much of their revenue on the web, the lesson is that an attack can show up as lost sales before it ever shows up as a data leak. Isolating systems quickly and then bringing them back in a controlled way takes an incident response plan written in advance. The unknowns, one by one: the type of attack and who is behind it, the root cause, a timeline for full recovery and whether any ransom has been demanded are not in the sources. We covered a separate case of small business sites being targeted on September 5; that story is unrelated to this one.
The UNALSOFT view
We read this less as a problem for one retail giant and more as a reminder of how fragile an online sales channel can be. Ahold Delhaize's response came in two steps: shut systems down to protect them, then restart them in a controlled order. A much smaller shop faces the same question: if orders, stock and customer data all hang on one point, sales stop when that point stops. That is why, on the e-commerce panel side, we treat backups, separated permissions and the ability to switch off one system without taking the others down as part of the setup. Since the sources contain no data about Türkiye, this piece does not claim any local impact.
What happens to your sales if your site goes dark for a day?
A short call is enough to review the single points of failure in your e-commerce stack and the steps to bring it back.