Ahold Delhaize Cyberattack: Check Delivery Recovery Locally

Ahold Delhaize says it took certain systems offline after detecting suspicious activity in its IT infrastructure. Its 19 October announcement confirms malicious activity and describes a phased recovery after the incident first disclosed on 12 October. Most brands across Europe and the United States were affected, although the impact varied by brand.

The update says Albert Heijn's website and app were back online, with home deliveries expected to resume from Friday, 23 October. Etos and Gall & Gall websites were available, Belgian e-commerce was fully operational, and most brand websites and apps in Central and Southeastern Europe were available. US brand e-commerce services were expected to return in the coming days.

Those are the company's statements as of 19 October, not a live availability guarantee for your postcode or order. All stores across its brands remained open, according to the announcement.

A working login screen, a restored shopping basket and a confirmed delivery are different stages of recovery. If you are waiting for groceries, check the status of your specific order through the retailer's usual app or website rather than assuming a group-wide announcement reinstates it.

Before placing a replacement order, check whether the original remains active and whether you have a cancellation or refund confirmation. If the information is unclear, contact the brand through its established customer-service route. Keep order confirmations and payment records so you can explain any duplicate charge or missed delivery. This is practical precautionary advice, not a claim that the incident caused duplicate billing.

Ahold Delhaize said that, while its investigation was ongoing, it had no evidence at that moment suggesting sensitive customer, associate or partner data had been taken. That is not a confirmed data-theft announcement, but neither is it a final guarantee that no information was accessed.

The company says it notified the Dutch National Cyber Security Centre within 24 hours of discovering the malicious activity and filed a formal police report on 19 October. The announcement does not identify a ransomware group or specify the technical route into its systems.

Disruption can make an unexpected refund or delivery message seem plausible. As a precaution, open your existing retailer app or type its known address yourself instead of using a link in an unsolicited message. Do not send a password or one-time security code to someone offering to restore an order.

This article is not reporting a confirmed scam campaign against Ahold Delhaize customers. The point is to verify an unexpected request independently, especially if it asks for a new payment, card details or an urgent account reset. If you have already shared payment details with a suspected impersonator, contact your bank through its official app or the number on your card.

A VPN protects the connection between your device and the VPN service and can reduce what a local network operator observes. It cannot bring a retailer's offline systems back online, confirm a delivery slot or establish whether the retailer lost data.

Nor does an encrypted connection prove that a refund website is genuine. For this incident, the useful steps are checking your own order, following your brand's current recovery updates and independently verifying unexpected messages—not buying a VPN as an outage fix.