Ahold Delhaize USA

Summary

Ahold Delhaize USA detected a cybersecurity threat within its U.S. network, prompting an immediate investigation with external cybersecurity experts and law enforcement notification. The company took systems offline to contain the issue, disrupting pharmacy services, e-commerce operations, and specific brands including Hannaford Supermarkets and Food Lion. While all physical stores remained operational, mitigation efforts prioritized protecting customer and associate security amid ongoing system assessments. The organization apologized for inconveniences resulting from the incident and continued implementing protective measures across affected services.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Ahold Delhaize USA detected a cybersecurity issue within its U.S. network on or around November 7, 2024, prompting an immediate response from the company. Upon discovery, the retail conglomerate’s internal security teams initiated an investigation with support from external cybersecurity experts and notified law enforcement authorities. The company took proactive containment measures, including deliberately taking some systems offline to isolate and protect them from further compromise. These actions disrupted specific operational segments, particularly affecting pharmacy services and e-commerce platforms across certain U.S. brands under the Ahold Delhaize USA umbrella. Despite these disruptions, all physical store locations remained operational and continued serving customers throughout the incident.

The cybersecurity incident directly impacted Hannaford Supermarkets and Food Lion, two prominent grocery brands within Ahold Delhaize USA’s portfolio. While the technical nature and origin of the threat were not publicly disclosed, the mitigation strategy caused measurable operational consequences, including service limitations at pharmacies and interruptions to online shopping capabilities. Ahold Delhaize emphasized ongoing efforts to assess the full scope of the issue while implementing additional protective measures for its systems. The company issued public apologies for inconveniences caused to customers and partners, reiterating that security for stakeholders remained its highest priority. No data breaches or customer information compromises were referenced in official statements, with focus placed exclusively on system integrity and service restoration.

Sources

Sources available to members: 2 sources.