Dutch-Belgian grocery group Ahold Delhaize has put a number on the damage from its October cyberattack. The company expects fourth-quarter net sales to fall by €200 million to €250 million (about $224M to $280M).
What Happened
The company, which owns Albert Heijn, Delhaize, Food Lion and Hannaford, reported a security issue in mid-October and disconnected some systems. On October 19 it confirmed a cyberattack.
The outage mainly hit online services in the Benelux and the U.S., plus supply-chain operations in the Benelux. CEO Frans Muller said most of the disruption was contained within two weeks, with restoration work continuing.
Financial Impact
- Q4 net sales: down €200M–€250M
- Q4 operating income: underlying and IFRS down €75M–€100M (about $84M–$112M)
- 2026 guidance: underlying EPS growth cut to low single digits, from mid-to-high single digits
- Free cash flow: about €2.1B, down from at least €2.3B. The company attributes this to the attack and to new Serbian rules on supplier payments.
- Response costs: incident response and remediation are expected to have little effect on 2026 IFRS operating income.
Data Exposure and Attribution
On October 19 the company said it had no evidence that customer, associate or partner data was stolen. It has not disclosed the type of attack, and no group has been named for this incident.
This is not the group's first incident. A November 2024 ransomware attack disrupted US brands including Hannaford and Giant Food pharmacies. INC Ransom claimed that attack, and the company later said the personal data of more than 2.2 million people was compromised.
Takeaways
- Operational disruption can cost far more than remediation. Here the lost sales and income dwarf the stated response costs.
- Retail supply chains and online ordering are tightly coupled to IT, so isolating systems quickly has a direct revenue cost.
- Repeat targeting of large retailers is common. Review segmentation and recovery plans after any prior incident.