Major US grocery chains hit by cybersecurity incident

You pull out your phone to check your grocery store's digital coupons or place an order for dinner. Suddenly, the app won't open. The website is unavailable, and the groceries you were counting on for tonight may never arrive. For anyone who depends on online grocery shopping, that's a frustrating problem.

That's the situation shoppers encountered this week at several major U.S. supermarket chains. A cybersecurity incident at grocery giant Ahold Delhaize forced the company to take some systems offline. The disruption affected Stop & Shop, Food Lion, Hannaford and the Giant supermarket chains. The company says its physical stores have remained open, although customers have experienced interruptions to online services.

There's another reason this story deserves attention. The same company suffered a major data breach in 2024 that exposed personal information belonging to more than 2.2 million people. So, as investigators work to understand the latest incident, shoppers have a reasonable question: Could their personal information be at risk again?

CHICK-FIL-A DATA BREACH EXPOSES CUSTOMER ACCOUNTS

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

FRENCH SUPERMARKETS FACE MILLIONS IN LOSSES AFTER CYBERATTACK HITS REFRIGERATORS NATIONWIDE

Stop & Shop is among five major U.S. supermarket chains that experienced online service disruptions following a cybersecurity incident at parent company Ahold Delhaize. (Ahold Delhaize)

Major grocery cybersecurity incident affects five US supermarket chains

On Oct. 12, Ahold Delhaize confirmed a cybersecurity issue within its network. The Netherlands-based company owns some of America's best-known regional supermarket chains and operates more than 9,400 stores worldwide. The company took certain systems offline to protect its operations while security teams investigated the problem. In its official statement, Ahold Delhaize said: "Our teams are taking steps to assess and mitigate the issue. This includes taking some systems offline to help protect them."

The company serves approximately 60 million customers each week across its international businesses. Consequently, a problem involving its technology can affect grocery shopping far beyond a single store.

Which US grocery stores are affected?

The cybersecurity incident has disrupted online services for five major U.S. supermarket chains:

• Stop & Shop: Serves customers across the Northeast, including Connecticut, New York, New Jersey, Massachusetts and Rhode Island.
• Food Lion: Operates supermarkets throughout the Southeast and Mid-Atlantic.
• Hannaford: Serves communities in Maine, New Hampshire, Vermont, Massachusetts and New York.
• Giant Food: Operates stores in Maryland, Virginia, Delaware and the Washington, D.C. area.
• The Giant Company: Operates Giant and Martin's stores primarily in Pennsylvania and neighboring states.

According to Grocery Dive, websites and mobile apps for all five chains were still unavailable on the morning of Wednesday, Oct. 14. That marked at least the third consecutive day of online disruptions. Customers have encountered problems accessing online ordering and digital coupons. Some app-based loyalty features have also been unavailable. In its Oct. 13 update, Ahold Delhaize said it was beginning a controlled relaunch of certain systems. However, as of Oct. 14, the company had not announced a firm timetable for restoring all affected services.

Are Stop & Shop, Food Lion and Hannaford stores still open?

Yes. In its Oct. 13 statement, Ahold Delhaize confirmed that its supermarkets across Europe and the United States remained open and were serving customers. Notices from the affected U.S. chains also indicated that pharmacies were operating during their normal business hours. However, online shopping has experienced significant disruptions. Customers have faced interruptions to grocery pickup and delivery services. Meanwhile, shoppers who rely on digital coupons have encountered problems accessing their usual discounts.

As of Oct. 14, Food Lion, Giant Food and The Giant Company also directed customers to third-party delivery services, including Instacart, DoorDash and Uber Eats, where available. For customers who depend on grocery delivery because of mobility challenges or limited transportation, these disruptions can create a serious inconvenience.

Food Lion stores remain open despite cybersecurity-related disruptions affecting the supermarket chain's website, mobile app and online ordering services. (Food Lion)

What happens to online grocery orders and refunds?

If you placed an online grocery order that was never fulfilled, the affected supermarket chains said customers would receive refunds for those orders. However, it's worth checking your credit card or bank account to make sure the refund actually arrives.

Keep your original order confirmation and any emails related to the purchase. If the refund doesn't appear within the retailer's stated processing period, contact customer service through a verified channel. If your grocery app remains unavailable, shopping inside a physical store may be your most dependable option. Still, consider calling ahead if you need a specific service or want to confirm that a prescription is ready.

Grocery giant moves toward restoring systems after security incident

On Oct. 13, Ahold Delhaize issued a statement, updated Oct. 14, saying it was in the process of starting a controlled relaunch of certain systems. The company said it was working with external cybersecurity experts and appropriate authorities to investigate the incident. In a direct response to CyberGuy, an Ahold Delhaize USA spokesperson provided an update on efforts to restore affected services. "Please know our teams are working as quickly as possible to restore systems safely that we took offline as a precautionary measure, including our websites," the spokesperson told CyberGuy.

The spokesperson also confirmed that stores remain open and apologized for the disruption to customers. However, Ahold Delhaize has not publicly identified who caused the problem or explained how its network was compromised. It has also not confirmed whether ransomware played a role. That leaves several important questions unanswered, including how the incident began and when all affected services will be restored. The company has not provided a firm timetable for full restoration.

Was customer data stolen in the grocery cybersecurity incident?

This may be the biggest concern for shoppers who have online grocery accounts. In its statement, Ahold Delhaize said investigators had found no evidence at that point that customer, employee or partner data was taken during the incident. That's encouraging for shoppers who have provided personal information to these supermarket chains. However, investigators were still examining the incident as of that update. The company's preliminary findings do not definitively rule out data theft. As of Oct. 14, Ahold Delhaize had not confirmed that personal information was stolen during this latest incident. That means shoppers should remain alert without assuming their personal information has been compromised.

Ahold Delhaize suffered a major data breach in 2024

Unfortunately, this isn't the first major cybersecurity incident involving Ahold Delhaize. In November 2024, hackers gained unauthorized access to internal U.S. business systems operated by Ahold Delhaize USA Services. The attackers obtained files containing sensitive personal information. The company eventually disclosed that more than 2.2 million people were affected. According to a filing with the Maine Attorney General, the breach involved approximately 2.24 million individuals. In a June 2025 breach notification, the company explained that the stolen information varied by person.

Exposed records could include:

• Names and contact information
• Social Security numbers
• Driver's license and passport numbers
• Financial account information
• Health information contained in employment records

The vast majority of those affected were current or former employees, along with their dependents and beneficiaries. The company said it had no indication that customer payment or pharmacy systems were compromised during the 2024 attack. The ransomware group INC Ransom claimed responsibility for the earlier incident. However, Ahold Delhaize did not publicly confirm the group's involvement. There is currently no confirmed connection between that attack and the October 2026 cybersecurity incident.

Why repeated cybersecurity incidents raise concerns

For many of us, grocery shopping now involves much more than walking into a store with a shopping list. We create accounts, save payment details and use loyalty programs to access discounts. Some families depend on online ordering every week. When a supermarket chain experiences a cybersecurity incident, those conveniences can suddenly disappear. For Ahold Delhaize, the challenge now extends beyond restoring its apps. The company also faces questions about the security of its systems after experiencing two major incidents in less than two years. Customers deserve to understand what happened once investigators have reliable answers.

Grocery shoppers increasingly rely on mobile apps for digital coupons and online orders, making cybersecurity-related outages especially frustrating. (Kurt "CyberGuy" Knutsson)

7 ways to protect yourself after a grocery store cybersecurity incident

Even without confirmed customer data theft, a widely reported cybersecurity incident can give scammers opportunities to target shoppers. These seven precautions can help you protect your information and avoid additional headaches.

1. Watch for fake grocery refund messages

Scammers may send emails or text messages claiming that you need to verify your payment information to receive a grocery refund. Those messages can seem especially convincing if you've recently had an order canceled. Avoid clicking unexpected refund links. Instead, review your original payment account or contact the retailer using a verified phone number. Never provide your banking password or pay a processing fee to receive a refund.

2. Review your grocery orders and charges

If you placed an order around the time of the outage, check whether the store charged you for groceries you never received. Save your confirmation emails and keep any receipts. Then, review your account for a refund. If the money doesn't appear within the retailer's stated processing period, contact customer service or your payment provider.

3. Secure your grocery store account password

If you reuse your grocery account password on other websites, replace it with a unique one. A password manager can generate and store strong passwords without forcing you to remember each one. Also, enable two-factor authentication (2FA) if your grocery account supports it. That gives your account another layer of protection against unauthorized access.

4. Be suspicious of unexpected security alerts

A real cybersecurity incident gives scammers an opportunity to send convincing fake breach notifications. You might receive a message claiming that your grocery account has been compromised and that you must immediately verify your identity. Before entering personal information, confirm the alert through the retailer's official communications.

5. Monitor your financial accounts and personal information

Although Ahold Delhaize reported no evidence of data theft in its Oct. 14 update, regularly checking your financial accounts remains a smart precaution. Enable transaction alerts through your bank or credit card provider. Pay attention to unfamiliar charges or unexpected account activity.

6. Check your digital coupons and loyalty discounts

If you normally use your grocery store's app to access digital coupons or loyalty rewards, check your receipt carefully. Some discounts may be unavailable while the retailer's online services are down. Before checking out, ask a store employee whether there's another way to receive an advertised discount. Keep your receipt if you believe you were overcharged so you can request an adjustment when customer service becomes available.

7. Take action if you've clicked a suspicious link

If you clicked a suspicious grocery refund or security alert link, your next steps depend on what information you shared. If you entered your password, change it immediately through the retailer's official website once it's available. Update any other accounts using that password. If you provided credit card or banking information, contact your financial institution and ask about securing your account. You can also report suspected fraud to the Federal Trade Commission at reportfraud.ftc.gov. If you downloaded a suspicious attachment, run a security scan using strong antivirus software on your device. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Kurt's key takeaways

I find it troubling that a company responsible for feeding millions of American families is dealing with another major cybersecurity incident so soon after its last one. We depend on grocery stores for something as basic as putting dinner on the table. Increasingly, those stores also want us to use their apps to access the best prices and place orders. What concerns me is how quickly those everyday conveniences can disappear when something goes wrong with a retailer's technology. And after the 2024 breach exposed personal information belonging to more than 2.2 million people, I think Ahold Delhaize has some serious questions to answer. I'd like to know what caused this latest incident and whether the company addressed weaknesses identified after the previous attack. Those answers could go a long way toward restoring customer confidence. As of the company's October 14 update, investigators had found no evidence that customer, employee or partner data was taken in the latest incident. That's reassuring, although the investigation continues. In the meantime, you should remain cautious about unexpected refund messages or suspicious security alerts.

If your grocery store suffered two major cybersecurity incidents in less than two years, would you still trust it with your personal information, or would you take your business somewhere else? Let us know by writing to us at CybergGy.com.

Sign up for my FREE CyberGuy Newsletter

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.

Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.