Albert Heijn partly recovers, delivery remains unavailable
Digital shelf labels are working again and several distribution centres are operating, but online ordering and personal discounts remain disabled.
There is news on this story (Tuesday, 13 October 2026, 16:00): Ahold has yet to find signs of customer-data theft
Follow-up to: Albert Heijn keeps shops open, but deliveries remain limited Tuesday, 13 October 2026, 12:27
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
Albert Heijn restored some of its systems on Tuesday following the cyber-security incident that began on Sunday. The shops are open and payments are working, but online ordering, home delivery and various personal savings features are still unavailable.
According to Albert Heijn’s latest update, the digital shelf labels are working again. As a result, regular prices in the shops are once again displayed correctly. The current personal Bonus prices are not yet shown on the labels, but the company says discounts are being applied at the checkout.
Several distribution centres are also operational again. Albert Heijn is making additional deliveries to supply the shops, but expects differences between branches and product categories. Ambient products, bread and frozen products are expected to remain more readily available than some fresh products, including fruit and vegetables.
The general Bonus Card is working again, but personal discounts and savings promotions remain temporarily unavailable. These include the personal Bonus Box, Koopzegels and Air Miles. The company is asking customers to keep their receipts so that certain discounts and savings balances can be processed later.
Groceries ordered online cannot yet be delivered and customers cannot place a new order. Customer services are also reportedly still unavailable, according to the update. Albert Heijn says it will keep customers informed through its shops and available online channels.
The incident began on Sunday afternoon. Albert Heijn, Etos and Gall & Gall shut down systems as a precaution after a cyber-security incident was identified within the network. Parent company Ahold Delhaize reported that the shops would remain open, but did not disclose the technical cause or precisely which systems had been affected.
There has been no public confirmation that customer data was taken. That does not mean a data breach has been definitively ruled out: the investigation into the cause, scope and possible access to data is still under way. Cyber-security experts stress that shutting down systems preventively is consistent with incident response, but in itself does not prove that data was actually stolen.
For customers, the visible improvement for now is mainly in the shops. Digital services and logistics are returning in phases. Ahold Delhaize has not yet given a date for the full restoration of all services.
One story, several perspectives
What is established
- Albert Heijn reported a cyber-security incident and shut down systems as a precaution.
- Shops and checkout payments are working; online ordering, delivery and some savings features are not.
- The cause and any access to customer data have not yet been publicly established.
Left
Arguments Believes that large retail chains provide vital public services and should therefore face stricter requirements for continuity, transparency and the protection of customer data.
Values Public responsibility, privacy and consumer protection.
Consequences May support higher investment and reporting requirements, even if these make business operations more expensive.
Centre
Arguments Supports controlled recovery and independent establishment of the facts before the company shares conclusions about the cause or a data breach.
Values Carefulness, proportionality and confidence in oversight.
Consequences Accepts temporary inconvenience if it prevents further spread, but expects clear updates and compensation.
Right
Arguments Emphasises that companies themselves are responsible for robust systems and that customers should not have to pay the price for inadequate digital resilience.
Values Individual responsibility, efficiency and contractual clarity.
Consequences Fears that additional rules will mainly increase costs and advocates strict liability when security demonstrably falls short.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The operational developments are taken directly from Albert Heijn’s update. The article clearly distinguishes between confirmed recovery and the still unknown cause and impact on data.
- confirmed Albert Heijn has partially restored digital shelf labels and several distribution centres. — This is stated in the update of 13 October at 11.30 am. source
- confirmed Online ordering and home delivery are still unavailable. — Albert Heijn states that customers cannot place orders and that existing online orders are not yet being delivered. source
- confirmed Personal discounts and savings promotions remain temporarily unavailable. — The company update mentions personal discounts, Koopzegels and Air Miles. source
- confirmed There has been no public confirmation that customer data was taken. — The official statements do not confirm data theft; Security.io describes the data impact as unknown. source
- confirmed The cyber-security incident began on Sunday afternoon. — Albert Heijn and Ahold Delhaize date the start of the incident to Sunday afternoon, 11 October. source
Editor's note
The partial system recovery measures were confirmed in Albert Heijn’s update of 13 October at 11.30 am. The cause and any access to customer data have not yet been established; therefore, no data theft is presented as fact.Sources
- Mediastatement inzake cybersecurity incident — Albert Heijn
- Ahold Delhaize takes precautionary measures following cybersecurity incident — Ahold Delhaize
- Groot cyberincident bij Albert Heijn: 'Je neemt niet zomaar zulke maatregelen' — NOS
- Ahold Delhaize isolates systems as multinational incident tests retail continuity — Security.io
The story so far
- Monday, 12 October 2026, 07:30 Websites and apps of Ahold shops hit by outage
- Monday, 12 October 2026, 08:28 IT incident hits three Ahold retail chains
- Monday, 12 October 2026, 10:58 Ahold shuts down systems after security incident
- Monday, 12 October 2026, 14:58 Ahold investigates security incident, shops remain open
- Monday, 12 October 2026, 16:01 Picnic and Jumbo see extra demand after Albert Heijn outage
- Monday, 12 October 2026, 22:30 Albert Heijn distribution centres halted, empty shelves loom
- Tuesday, 13 October 2026, 07:57 Albert Heijn websites remain offline after cyber incident
- Tuesday, 13 October 2026, 08:59 Albert Heijn halts deliveries after cyber incident
- Tuesday, 13 October 2026, 09:28 Empty shelves follow cyber incident at Albert Heijn
- Tuesday, 13 October 2026, 12:27 Albert Heijn keeps shops open, but deliveries remain limited
- Tuesday, 13 October 2026, 14:59 Albert Heijn partly recovers, delivery remains unavailable (this article)
- Tuesday, 13 October 2026, 15:29 Ahold begins controlled restart after cyber incident
- Tuesday, 13 October 2026, 16:00 Ahold has yet to find signs of customer-data theft