Albert Heijn brings systems back online, but supplies remain uncertain
The supermarket chain is restoring parts of its IT systems, while deliveries and some supplies remain suspended.
There is news on this story (Wednesday, 14 October 2026, 19:29): Police ask Ahold to file report after cyber incident
Follow-up to: Albert Heijn resumes deliveries after cyber incident Wednesday, 14 October 2026, 12:01
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
Albert Heijn has begun the controlled restart of systems following the cyber incident that has caused disruption since Sunday. This does not mean that all shops will immediately be fully supplied: according to the company, fresh products in particular may remain temporarily scarce.
Ahold Delhaize, Albert Heijn’s parent company, says that several distribution centres are operational again. Shops are being supplied from these locations in various ways. The group has not disclosed exactly which centres have resumed operations or how the alternative logistics have been organised.
Supplies are therefore not yet arriving as usual. Albert Heijn warns that ambient products, frozen goods and bread are likely to be more readily available than certain fresh products, including fruit and vegetables. The supermarket chain is working to increase its delivery capacity further.
The websites, apps and customer service were still not fully available on Wednesday. Online groceries could also not yet be ordered or delivered normally. Electronic shelf labels are now showing regular prices again, while some personal bonus features and savings schemes are still not working.
The incident began on Sunday afternoon. As a precaution, Albert Heijn, Etos and Gall & Gall shut down several systems to protect the IT environment. Ahold Delhaize has still not disclosed the cause and says the investigation is continuing together with external cybersecurity experts.
The company reports that there are currently no indications that customer or employee data have been stolen. This statement reflects the current state of the investigation and is not a definitive conclusion about the incident’s eventual scope. It has also not been disclosed whether a ransomware group was involved in the attack.
The consequences extend beyond empty shelves. Suppliers, distribution centres, delivery services and competitors must deal with a sudden change in demand. Picnic reported increased activity, while Albert Heijn is temporarily using emergency procedures to keep its shops open and the main flows of goods moving.
Chief executive Margaret Versteden-van Duijn said in a television interview that it could still take weeks before it becomes clear what type of attack took place. Ahold Delhaize has provided no timetable for restoring the individual systems. The chain says only that systems are being switched back on step by step and under controlled conditions.
One story, several perspectives
What is established
- Ahold Delhaize shut down systems as a precaution and is gradually restarting parts of them under controlled conditions.
- Shops are open, but online services and parts of the logistics operation are still disrupted.
- The company says there are currently no indications that data have been stolen.
- The cause and full impact of the incident have not yet been made public.
Left
Arguments The disruption shows that essential food supplies cannot be made entirely dependent on private digital systems. Large retailers should face stricter continuity requirements, protect workers better and provide customers with more transparent information.
Values Public resilience, consumer protection and the protection of workers.
Consequences More rules and investment could increase costs, but might limit the social damage caused by prolonged disruption.
Centre
Arguments A controlled restart is sensible as long as it is unclear how deeply the incident has penetrated the systems. The government should mainly supervise reporting, recovery and data protection, and should not force companies to act faster than is safe.
Values Proportionality, expertise and continuity.
Consequences A step-by-step approach may cause temporary inconvenience, but reduces the risk of a vulnerability being reactivated.
Right
Arguments A private company should remain primarily responsible for its own digital security and contingency provisions. Government intervention should be limited to clear minimum standards and enforcement afterwards.
Values Individual responsibility, business freedom and a restrained government.
Consequences Fewer rules can support innovation and efficiency, but leave the financial consequences of inadequate preparation mainly with companies and customers.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The key facts about the controlled restart, partial supplies and unavailable online services are confirmed by Ahold Delhaize and NOS. The uncertainty about the cause and end date is explicitly presented as uncertainty.
- confirmed Ahold Delhaize has begun a controlled restart of certain systems. — This is stated in the company update of 13 October and reported by NOS. source
- confirmed Several distribution centres are operational and supplying shops again. — NOS quotes Albert Heijn and CNV on this. source
- confirmed Websites, apps, customer service and online delivery were not yet fully available. — The company statement and NOS describe these limitations. source
- confirmed At that point, there were no indications that customer or employee data had been stolen. — This is stated in Ahold Delhaize’s statement. source
- confirmed It could take weeks before it becomes clear what type of attack took place. — This was attributed to chief executive Margaret Versteden-van Duijn in reports about her television appearance. source
Editor's note
It is certain that Ahold Delhaize is restarting systems in a controlled manner and that supplies have partially resumed. The cause, scope and full recovery time of the incident remain unknown.Sources
- Albert Heijn start systemen op, geen aanwijzingen voor gestolen klantgegevens — NOS
- Update on Ahold Delhaize's cybersecurity incident — Ahold Delhaize
- Hoe gaat AGF-keten om met cyberincident Albert Heijn? — AGF.nl
- Albert Heijn expects distribution centres to be operational soon after cyber incident — Reuters via MarketScreener
The story so far
- Monday, 12 October 2026, 07:30 Websites and apps of Ahold shops hit by outage
- Monday, 12 October 2026, 08:28 IT incident hits three Ahold retail chains
- Monday, 12 October 2026, 10:58 Ahold shuts down systems after security incident
- Monday, 12 October 2026, 14:58 Ahold investigates security incident, shops remain open
- Monday, 12 October 2026, 16:01 Picnic and Jumbo see extra demand after Albert Heijn outage
- Monday, 12 October 2026, 22:30 Albert Heijn distribution centres halted, empty shelves loom
- Tuesday, 13 October 2026, 07:57 Albert Heijn websites remain offline after cyber incident
- Tuesday, 13 October 2026, 08:59 Albert Heijn halts deliveries after cyber incident
- Tuesday, 13 October 2026, 09:28 Empty shelves follow cyber incident at Albert Heijn
- Tuesday, 13 October 2026, 12:27 Albert Heijn keeps shops open, but deliveries remain limited
- Tuesday, 13 October 2026, 14:59 Albert Heijn partly recovers, delivery remains unavailable
- Tuesday, 13 October 2026, 15:29 Ahold begins controlled restart after cyber incident
- Tuesday, 13 October 2026, 16:00 Ahold has yet to find signs of customer-data theft
- Tuesday, 13 October 2026, 18:30 Jetten: intervention at AH may have prevented a larger incident
- Tuesday, 13 October 2026, 20:59 Restoration of Albert Heijn systems could take another week
- Wednesday, 14 October 2026, 12:01 Albert Heijn resumes deliveries after cyber incident
- Wednesday, 14 October 2026, 18:01 Albert Heijn brings systems back online, but supplies remain uncertain (this article)
- Wednesday, 14 October 2026, 19:29 Police ask Ahold to file report after cyber incident
More on this in Dutch media
- AD — „albert heijn”
- RTL Nieuws — „albert heijn”
- FD — „albert heijn”