Ahold Delhaize faces an uneven recovery after a cyber incident disrupted its supermarkets

A week after announcing a network security issue, Ahold Delhaize is still trying to restore services its customers use for everyday grocery shopping. The owner of chains including Stop & Shop, Giant Food, Hannaford and Food Lion continues to face disruptions to digital and delivery operations on Monday, October 19, with recovery varying by country and brand.

The contrast is visible in Europe. Delhaize deliveries in Belgium resumed over the weekend, according to Reuters. In the Netherlands, Albert Heijn has restored functions on its website and Mijn AH app, but home ordering has not yet returned to normal. A screen coming back online does not mean the entire operation behind filling a grocery basket is working again.

For U.S. consumers, the incident extends beyond a single regional brand. Together, the affected chains form one of the country's major grocery groups. Even so, the effects are not identical at every store: the status of an app or delivery service does not establish conditions at each location.

From precautionary shutdowns to a phased return

Ahold Delhaize disclosed the problem on Monday, October 12. In its statement, it said its teams were assessing and mitigating a security incident within the network and had taken some systems offline to protect them. At the time, the company said its supermarkets remained open.

That decision was intended to contain the problem, but it also disabled tools used by customers and internal operations. Reuters reported on Monday that distribution difficulties had affected supplies to stores that remained open to shoppers. On Friday, the group had described a controlled restart of several systems.

The investigation continues, and the company has not publicly explained the incident's nature in detail. Nor have those responsible been conclusively identified in the reporting reviewed. Ahold has said it has no evidence that customer data was stolen. That wording describes what is known during the investigation, rather than ruling out what subsequent checks might reveal.

What has returned at Albert Heijn, and what remains unavailable

Dutch specialist publication Logimerce reported on Monday that Albert Heijn's website and app became available again on Sunday. Users can once more access their accounts, view offers and use certain balance and loyalty-program features. The chain said accumulated credits and points had been preserved.

Deliveries have a different timetable. According to the same report, they will resume gradually on Friday, October 23, while orders scheduled through Thursday, October 22, are canceled. Customers who have already paid will receive refunds in the following days, according to company instructions reported by the publication.

This is a planned restart, rather than a guarantee that every service will be operating at its usual capacity on Friday. The distinction matters to households organizing their week around a delivery and to people who need to know whether an earlier order is still going ahead.

The restoration of digital functions also leaves unresolved compensation for discounts and points that could not be used. Logimerce says the company will provide more details and expects to automate much of the process. Instructions about receipts and balances apply to Albert Heijn; they should not simply be assumed to cover the group's other brands.

Distribution is vulnerable too

The incident exposes a dependency shoppers rarely see: a supermarket must coordinate information, goods and transport to keep products available. When part of that coordination fails, keeping stores open helps maintain service but does not eliminate every supply problem.

Jack van der Veen, an emeritus professor of supply chain management, argues in a column published by Warehouse Totaal that the response cannot be limited to holding more stock. Maintaining reserves and extra capacity costs money, he warns, and can put pressure on prices that consumers already consider high.

His proposals include faster decision-making, information sharing and cooperation among supply chain participants. This is an assessment of how to withstand disruptions, rather than a technical audit of the attack or a conclusion about this incident's specific cause. The expert also notes that the flow of goods to stores had improved before home deliveries did.

The test will be restoring the full service

Recovery will be measured on several fronts: taking orders, completing deliveries, keeping products in stock and resolving outstanding payments. Those tasks will not necessarily be completed at the same time. Belgium's experience shows progress, while conditions in the Netherlands and the United States still require separate updates.

Ahold Delhaize still has to explain what happened and complete the restoration. For customers, the most useful information will concern their own chain and order. For the industry, the incident raises a question extending beyond data protection: how to keep food supplies moving when an IT disruption hits an operation that depends on thousands of coordinated decisions.