EXPLORINEER
en

UK — The Register

Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline

Security1 min read

Ahold Delhaize, a large Dutch grocery company that owns US and European supermarket chains, says a cyberattack forced it to turn off many of its IT systems. Stores stayed open, and the company says no sensitive customer data has been found stolen so far.

What happened

Ahold Delhaize shut down some computer systems, including websites and apps, to protect them after a cyberattack. This affected most of its brands in Europe and the United States. The company first reported the problem on October 12, and confirmed the details on October 19, 2026.

Key facts

  • Brands affected include Food Lion, Giant Food, and Stop & Shop in the US, and Albert Heijn in the Netherlands.
  • All physical stores were still open at the time of the statement.
  • The company reported the incident to the Dutch National Cyber Security Centre last week and to Dutch police on Monday.
  • Albert Heijn's website and app are back online. Home deliveries are expected to restart on Friday.
  • This is the company's second cyberattack in two years.

Earlier attack and a related case

In November 2024, a hacking group called INC Ransom broke into the company's systems and leaked some stolen files. The company later found that data from more than 2.2 million people had been stolen, including personal, financial, and health details. The company has not said whether the new attack is linked to attacks on refrigeration controllers at hundreds of French supermarkets that started on October 11.

Why it matters

Grocery stores depend on computers for deliveries, online orders, and prescriptions. When these systems go down, customers and workers can be affected. Because this is the second big attack in two years, people will want to know whether the company has made its defenses stronger.

What to watch

  • Whether online shopping and deliveries return on schedule in the US and Belgium.
  • Whether the investigation finds any stolen customer, worker, or partner data.
  • Whether the company links this attack to the attacks on French supermarket refrigerators.

Glossary

Ahold Delhaize
A Dutch company that runs supermarket chains in the US and Europe.
Food Lion
A US supermarket chain owned by Ahold Delhaize.
Stop & Shop
A US supermarket chain owned by Ahold Delhaize.
Albert Heijn
A Dutch supermarket chain owned by Ahold Delhaize.
INC Ransom
A criminal hacking group that steals data and demands payment or leaks it.
cyberattack
An attack where criminals break into computer systems to steal, damage, or lock data.
Security전자신문

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

SecurityVnExpress

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.

Security전자신문

Election Deepfakes Up 27% Worldwide; South Korea Ranks Third in Cumulative Cases

Reported AI-generated election deepfakes surged worldwide, with January to September 2026 cases already exceeding last year's full-year total by 27%, according to a Surfshark study. South Korea ranks third globally in cumulative cases with 16 since 2021, behind the United States and India. The study counted 235 cases across 46 countries from January 2020 to September 2026.