Ahold Delhaize Confirms Impact from Cybersecurity Incident, Estimates €200M–€250M Q4 Revenue Reduction

What Happened

Ahold Delhaize issued a statement on October 12 reporting a security issue on its network and noting that its teams were assessing and mitigating the situation, including taking certain systems offline to protect its environment; physical stores remained open to serve customers at the time of the announcement ^[1].

Its third-quarter earnings release on November 4 further explained that a cybersecurity incident occurred in October after the quarter ended, prompting the company to take certain systems offline in accordance with protocol to protect its IT environment; the impact varied, primarily affecting online capabilities in the Benelux and the United States as well as supply chain operations in the Benelux, whereas Bol was unaffected ^[2].

The company has not specified the type of attack in its public earnings disclosures. Cybernews cited company statements indicating that no evidence of customer or employee data theft had been found ^[3].

Scope of Impact

According to Ahold Delhaize's November 4 estimates, the incident is expected to negatively impact fourth-quarter net sales by approximately €200 million to €250 million, and reduce underlying and IFRS operating income by approximately €75 million to €100 million; incremental response and recovery costs are also expected to have a minor impact on 2026 IFRS operating income ^[2].

The company revised its 2026 outlook accordingly, projecting free cash flow of approximately €2.1 billion, down from its prior guidance of at least €2.3 billion ^[2].

Response and Remediation

The October 12 statement emphasized prioritizing the protection of infrastructure, customers, associates, and partners ^[1]. In its November earnings commentary, the company apologized to brand customers for the service disruptions and stated that most disruptions were contained within roughly two weeks, with efforts continuing to restore normal operations .