Food Lion’s owner pulled systems offline after a network security issue

Ahold Delhaize, the Dutch-headquartered parent of Food Lion, Stop & Shop, Giant Food and Hannaford, took some of its systems offline on October 12, 2026 after what it calls a security issue within its network. Stores stayed open, but online ordering at Food Lion was reported disrupted. The company has not named a cause, an attacker or any stolen data.

The group says it runs more than 9,400 local stores and serves about 60 million customers a week, so even a partial outage reaches a long list of shoppers on both sides of the Atlantic. What follows separates what the company has said from what has only been reported secondhand.

What Ahold Delhaize said on October 12

The company’s newsroom release, datelined Zaandam in the Netherlands at 8:29 a.m. Amsterdam time on October 12, states: “Ahold Delhaize is experiencing a security issue within its network.” It adds that its teams are assessing and working to contain the problem, that some systems were taken offline as a precaution, and that stores remain open and serving customers. The release apologizes for inconvenience and calls protecting its infrastructure a top priority.

The release also carries a notice that it contains inside information under Article 7(1) of the European Union Market Abuse Regulation. That is the only regulatory marker found in the record so far; no U.S. securities filing or state breach notification was located, and none has been reported.

The wording matters. Ahold Delhaize’s own phrase is “security issue,” and the release’s title uses “cybersecurity incident.” Neither term says ransomware, and neither says that customer or employee records were copied. When BleepingComputer asked whether corporate and store systems were both affected, whether the disruption was worldwide and whether any devices were encrypted, a company spokesperson answered none of those questions and pointed back to the release.

Reported disruption at Food Lion, Stop & Shop and in Europe

The Food Lion detail comes from an internal memo that BleepingComputer saw described by staff. It labeled the event an IT outage and warned that a store “may be unable to shop, stage, or hand off orders.” That describes the pickup and delivery chain: employees picking an online order, staging it, and handing it to a customer or driver. It is a reported effect on one banner, not a statement from the company, and the memo does not say how many Food Lion stores were touched or whether curbside and home delivery were affected differently. Shoppers who rely on scheduled pickup slots are the group most likely to notice, since staging is the step the memo singles out.

BleepingComputer also relayed employee reports of trouble reaching schedules and pay stubs at Stop & Shop. Those reports come from staff posts, and the company has not confirmed them. Nothing in the record says whether Giant Food or Hannaford were affected, and it would be wrong to assume they were simply because they share a parent. Each banner runs its own storefront, yet the group has not said how much back-end infrastructure those brands share, which is the detail that would show how far the shutdown reached.

Europe looks harder hit. The Dutch broadcaster NOS reported that problems at Albert Heijn began on the afternoon of October 11 and that websites, apps, customer service, online delivery and loyalty systems were down at Albert Heijn, Etos and Gall & Gall. Electronic shelf labels showed the previous week’s promotional prices. Albert Heijn first described an IT incident, and its stores opened normally on the morning of October 12. In Belgium, Delhaize reported that new weekly orders and customer service were unavailable, though its app and website still worked.

What has not been established

No source read for this report names an attacker, claims responsibility, or says data was taken. Whether the event was an intrusion, a malware infection or a defensive shutdown triggered by something else is not stated, and the company has given no timeline for restoring online ordering. The spokesperson’s silence on encryption is the clearest open question, because it is the usual first sign of a ransomware event and the company has neither confirmed nor ruled it out. Readers should treat the word “cyberattack” in some headlines as shorthand rather than a confirmed finding.

History explains why the question of stolen data will follow this story. After a November 2024 attack, Ahold Delhaize confirmed data theft following claims by the INC ransomware group, and the company later said the breach affected more than 2.2 million people in the United States. That earlier incident is a separate event, and nothing in the October 12 statement links the two.

For Food Lion shoppers, the practical advice is modest. Orders may be delayed or unavailable, and stores themselves are reported open. If the company later says personal information was involved, it would be expected to notify affected people directly; until then, there is no confirmed reason to change passwords or freeze credit on the strength of this incident alone.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview