Grocery Giant Ahold Delhaize Reveals Devastating Financial Toll of October Cyberattack
Dutch-Belgian retail giant Ahold Delhaize has estimated that a recent cyberattack will cost it between €200 million to €250 million ($224 million to $280 million) in lost sales, making it one of the most significant cybersecurity incidents to hit the industry this year. The attack, which occurred after the company’s third-quarter results were published, also forced Ahold Delhaize to revise its 2026 guidance downward, projecting lower earnings per share and reduced free cash flow.
The cyberattack, which affected operations in the US and the Benelux region, was detected in mid-October. At the time, Ahold Delhaize announced that it had disconnected some systems to protect its IT environment, mainly impacting online capabilities in the Benelux and the US, as well as supply-chain operations in the Benelux. The company has not disclosed what type of attack it experienced, but it confirmed that there was no evidence at the time that customer, associate, or partner data had been stolen.
Ahold Delhaize’s president and CEO, Frans Muller, stated that while most of the disruption was contained within two weeks, work continues to fully restore normal operations. The company attributes the financial impact to both the cyberattack and newly introduced Serbian rules governing payments to suppliers. In addition to lost sales, Ahold Delhaize faces incident response and remediation expenses, but believes these will have little effect on its IFRS operating income for 2026.
This is not the first time Ahold Delhaize’s systems have been targeted by cyber attackers. In November 2024, a ransomware attack disrupted several of its US brands, including Hannaford supermarkets and Giant Food pharmacies. The company later disclosed that over 2.2 million people had their personal information compromised.
The financial toll of the cyberattack is significant, but it’s not just about the money. Ahold Delhaize has shown resilience in the face of this incident, demonstrating its ability to adapt and respond quickly. As a major retailer with multiple brands across Europe and North America, the company understands the importance of robust cybersecurity measures.
The incident serves as a reminder that even large companies are not immune to cyber attacks. In fact, Ahold Delhaize’s experience highlights the need for businesses to be proactive in protecting themselves against cyber threats. This includes investing in robust security measures, conducting regular risk assessments, and staying up-to-date with the latest threat intelligence.
As we learn more about this incident and its aftermath, one thing is clear: cybersecurity is no longer just an IT issue, but a business imperative. Companies must prioritize cybersecurity to protect their operations, reputation, and bottom line. Ahold Delhaize’s experience serves as a stark reminder that even the most robust security measures can be breached, and it’s only by staying vigilant and proactive that businesses can minimize the impact of such incidents.
Source: SecurityWeek — 2026-11-06