De Vector

Ahold has yet to find signs of customer-data theft

The supermarket group is still investigating the cyber incident and is cautiously bringing some systems back online.

Follow-up to: Ahold begins controlled restart after cyber incident Tuesday, 13 October 2026, 15:29

Ahold Delhaize says it has so far found no signs that customer or employee data were stolen in the cyber incident. The investigation is ongoing, while the group begins a controlled restart of some systems.

Ahold Delhaize’s latest statement is explicitly provisional. The company says the investigation is still under way and that it therefore cannot yet make a definitive statement on whether data were accessed or copied. The group says it will not share further technical details for as long as that information could harm the investigation or security.

Ahold has taken systems offline as a precaution since Sunday after identifying a security problem in its network. This affected, among other things, the websites, apps and online orders of Albert Heijn, Etos and Gall & Gall. Physical shops remained open, but logistics processes and parts of loyalty programmes were restricted.

The group says some systems are now being restarted gradually. This does not mean all services will return immediately. The precise consequences vary by brand and country. Ahold says shops in Europe and the United States are open and that local teams are trying to limit the disruption for customers and employees.

For Dutch customers, the main uncertainty remains how quickly delivery, the Mijn Albert Heijn app and personalised Bonus offers will fully return. Albert Heijn previously said that customers should keep their receipts if they missed personalised discounts because of the disruption. The company has promised to provide a solution later.

Reuters reported, based on Ahold’s statement, that there is currently no indication of customer-data theft. The news agency also wrote that the Dutch cyber-security authority sees no reason to link the incident at Ahold to a separate attack on French supermarkets. There is still no definitive technical conclusion on either issue.

The new information reduces uncertainty about possible data theft, but does not remove it entirely. An absence of indications is not the same as a completed investigation. Until Ahold announces the cause, scale or recovery timetable, the main certainty is that precautionary measures have disrupted large parts of the digital retail chain.

Respond to this article

← Back to the edition