What Ahold Delhaize took offline on October 12

What happened

On October 12, 2026, Ahold Delhaize said from Zaandam that it was experiencing a security issue within its network. The company said teams were assessing and mitigating the issue, and that some systems had been taken offline to help protect them. It said stores were open and serving customers, and it apologized to customers and partners. The statement does not name a cause, a threat actor, ransomware, or a restoration date. Grocery Dive, the same day, reported that five United States banner sites were down that Monday morning, naming Hannaford, Stop and Shop, Giant Food, Food Lion, and The Giant Company, and that Dutch banners Albert Heijn, Etos, and Gall and Gall were affected too. The company told Grocery Dive it had no additional statement and no timeline. The paper filing the notice isFutureweb.

What the company did not say

The newsroom post is a precautionary notice. It is not an incident report with an entry path, and this page will not supply one. Offline, in the company's sentence, means some systems were taken down to protect them. It does not mean every store system, and the company says stores were open. The desk for that notice isSecurity.

What other outlets add, and do not

Supermarket News reported that websites were shut and that online grocery ordering and deliveries were suspended. That operational detail is the outlet's account, and this page attributes it there rather than rewriting it as the company's sentence. Grocery Dive's banner list is also the outlet's account of which sites were down. A French refrigeration report the same week is a different story, and the Ahold statement does not tie the two together. An identifier for a published advisory, which this notice is not, iswhat a CVE identifier is.

Why it matters on this desk

The dependency is a grocer's own description of a security issue, the systems it chose to take offline, and the limit it put on the public record: no cause, no actor, no date to come back. Shoppers can hold that the stores were open while some systems were not. What a session cannot be, a different privacy limit, iswhat a session cannot be.

What this page will not import

This page does not describe an intrusion, a malware family, or a set of commands. It does not merge the notice with a separate report about supermarket refrigeration in France. It does not invent a restoration clock the company told Grocery Dive it would not give. The advisory, as a form of security document this notice is not, isthe advisory is the story.

Where the accounts overlap

The company, Grocery Dive, and Supermarket News overlap on an October 12 security issue and on systems or sites that were not available. They overlap on stores remaining open, where the company and Grocery Dive say so. They do not overlap on a named cause, because the company did not give one and this page will not borrow one from a different incident. No indicator, no malware name, and no entry path belong in this brief. Online ordering, where Supermarket News describes a suspension, is that outlet's account. Zaandam is the dateline on the company statement. No indicator, no malware name, and no entry path belong in this brief. Online ordering, where Supermarket News describes a suspension, is that outlet's account. Zaandam is the dateline on the company statement.

What to watch next

A company update that names a cause, a restoration, or a customer action would replace the precautionary sentence. Another outlet adding a theory the newsroom has not adopted would not. The standing note on who holds a credential, which this notice does not decide, isthe key stays with the holder.

What would change the record

A later Ahold Delhaize statement that withdraws the security-issue wording, or that gives a date when the offline systems returned, would change it. A banner count that the company contradicts would change Grocery Dive's list, not the newsroom sentence, until the company adopts the list. A French incident report would change a different record. Zaandam is the dateline on the company statement. Online ordering, where Supermarket News describes a suspension, is that outlet's account. The apology is to customers and partners. It is not a list of who was exposed. The apology is to customers and partners. It is not a list of who was exposed. The apology is to customers and partners. It is not a list of who was exposed. The apology is to customers and partners. It is not a list of who was exposed.

What stays a precaution

What stays specific is the October 12, 2026 Zaandam statement: a security issue in the network, teams assessing and mitigating, some systems taken offline to protect them, stores open, an apology, and no cause or restoration date. Grocery Dive's banner names and Supermarket News's account of suspended online ordering stay attributed to those outlets. The apology is to customers and partners. It is not a list of who was exposed. Zaandam is the dateline on the company statement. No indicator, no malware name, and no entry path belong in this brief. Online ordering, where Supermarket News describes a suspension, is that outlet's account. Zaandam is the dateline on the company statement. No indicator, no malware name, and no entry path belong in this brief.