Ahold Delhaize reportedly filed police report after cyber incident
The parent company of Albert Heijn cites malicious actions, but the technical cause and extent of the damage have not yet been made public.
Follow-up to: Albert Heijn to gradually resume deliveries on Friday Monday, 19 October 2026, 16:44
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
Ahold Delhaize has reportedly filed a police report following the cyber incident that has affected the systems of Albert Heijn and other brands since 11 October, according to several Dutch news organisations. No public confirmation of the report itself was available when this edition closed.
The disruption began on Sunday 11 October, according to Albert Heijn. The supermarket chain reported that it was a cybersecurity incident and that various systems had been temporarily shut down as a precaution. According to Albert Heijn, the shops remained open, but online services and deliveries were affected.
The new development is that Ahold Delhaize is reportedly approaching the police. Dutch news organisations write that the parent company refers to malicious actions by third parties. This places a technical problem more explicitly in the category of a potentially criminal incident, but does not yet mean that a perpetrator has been identified.
On Albert Heijn’s customer service page, it stated on 18 October that the systems were being restarted gradually. Online grocery orders up to and including Thursday 22 October would be cancelled. The company says that safety takes priority in restoring the services.
The police previously wrote that Ahold Delhaize had been invited to file a police report. The police also pointed to the reporting obligation for companies covered by the new Cybersecurity Act. The invitation to file a report in itself does not confirm that the report has since been filed.
No confirmed information is available about possible data theft. Ahold Delhaize has not made public exactly which systems were affected, whether customer data was accessed and what damage the incident caused. It is also unclear whether the incident concerns the Netherlands exclusively; Ahold Delhaize has several international supermarket brands.
For customers, the situation currently mainly means that online orders and some digital services remain limited. The incident also raises questions for other retailers about the continuity of digital services. Any police report could furthermore have consequences for insurers, regulators and suppliers of the affected infrastructure.
Also show where in Europe and in the world
One story, several perspectives
What is established
- Albert Heijn and other Ahold Delhaize brands have been dealing with a cybersecurity incident since 11 October.
- The police reported that the company had been invited to file a police report.
- The cause, extent and any consequences for personal data have not been publicly confirmed.
Left
Arguments According to this perspective, large companies should be more transparent about digital incidents because customers and employees bear the consequences. Stricter reporting obligations and public oversight can reduce power imbalances.
Values Consumer protection, transparency and public responsibility.
Consequences This could strengthen trust, but companies may become more reluctant if every early report causes reputational damage.
Centre
Arguments A careful investigation should first establish what happened. The company, police and regulators should share information without harming a criminal investigation or security.
Values Proportionality, fact-finding and continuity of services.
Consequences This approach prevents hasty conclusions, but leaves customers facing uncertainty temporarily.
Right
Arguments Companies should remain primarily responsible for their own security and recovery. Additional rules should not restrict operational freedom so much that incidents are dealt with more slowly.
Values Individual responsibility, efficiency and limited government intervention.
Consequences This could enable faster recovery, but critics fear that customers will receive too little information about risks.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved with corrections · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The text separates confirmed information about the incident from the police report, which has not yet been independently confirmed. Speculation about a data breach or perpetrator has been omitted.
- confirmed The incident began on 11 October. — Albert Heijn gives this date on its customer service page and in the media statement. source
- confirmed The police had invited Ahold Delhaize to file a police report. — This is stated in the police report. source
- uncertain Ahold Delhaize filed a police report on 19 October. — Reported in several news RSS headlines, but not confirmed in a primary source found. source
1 correction(s) applied
- Was: Ahold Delhaize filed a police report following the cyber incident.Now: Ahold Delhaize reportedly filed a police report following the cyber incident, according to several Dutch news organisations; no public primary confirmation could be found. (insufficient independent primary confirmation)
Editor's note
The incident and the earlier invitation to file a police report have been publicly confirmed. The current report on 19 October comes from several RSS headlines, but could not be verified through a public primary source; therefore insufficient_sources.Sources
- Informatie over het cybersecurityincident bij Albert Heijn — Politie
- Klantenservice Albert Heijn — Albert Heijn
- Mediastatement inzake IT-incident — Albert Heijn
The story so far
- Monday, 19 October 2026, 16:44 Albert Heijn to gradually resume deliveries on Friday
- Monday, 19 October 2026, 17:43 Ahold Delhaize reportedly filed police report after cyber incident (this article)
More on this in Dutch media
- NU.nl — „albert heijn”
- De Telegraaf — „albert heijn”
- Trouw — „albert heijn”