Stop & Shop

Summary

A cyberattack on Oct 12 2026 disabled the websites and apps of Stop & Shop, Hannaford and Giant Food, preventing online orders and loyalty access; services were restored a week later after Ahold Delhaize confirmed malicious actions.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

The disruption began on Monday, Oct. 12, when a cyberattack affecting grocery retailer Ahold Delhaize knocked the websites and mobile applications of Stop & Shop, Hannaford, and Giant Food offline. The incident affected the network of the three chains’ parent company and disrupted their digital services. Online ordering became unavailable through the companies’ own websites and apps, while customers also lost access to digital benefits such as loyalty points. Millions of shoppers were unable to use the affected services during the outage. Stop & Shop customers who relied on online grocery delivery were likewise unable to arrange weekly deliveries through the retailer’s digital channels.

After the incident was detected, Stop & Shop said some systems had been taken offline as a precaution. As of Oct. 19, the company said there was no evidence that customer data had been compromised. The Stop & Shop website and app remained unavailable for online ordering throughout the following week. The website displayed a maintenance message stating that the company was working to restore service as quickly as possible. A company spokesperson said there was no timeline for fully restoring the website and app, and the company’s president apologized on Friday, Oct. 16. During the disruption, customers could still place grocery orders through third-party delivery services, including Instacart, DoorDash, and Uber Eats. Stop & Shop also offered customers 10% off their next in-store purchase through Thursday, Oct. 22.

On Monday, Oct. 19, as the disruption entered its second week, Ahold Delhaize confirmed that malicious actions had caused the incident. The company also said it had filed a police report in the Netherlands. The Stop & Shop website and app were still offline at that point, with no announced restoration schedule. By Tuesday morning, Oct. 20, the website was back online, more than a week after the disruption began. A company spokesperson said all services had been fully restored, including online ordering and access to loyalty benefits. The effects during the outage included customers being unable to obtain weekly groceries through Stop & Shop’s delivery service, as experienced by Shawn Marie Schaffer.

Sources

Sources available to members: 2 sources.