Ahold Delhaize estimates €200–250M net sales loss from October 2026 cyberattack, cuts 2026 guidance
Ahold Delhaize, the Dutch-Belgian grocer behind Albert Heijn, Delhaize, Food Lion and Hannaford, estimates that its October 2026 cyberattack will cut fourth-quarter net sales by €200–250 million. It also expects a €75–100 million hit to fourth-quarter underlying and IFRS operating income. The company published the figures with its third-quarter results. As a result it lowered its 2026 guidance: underlying EPS growth is now forecast in the low single digits, and free cash flow around €2.1 billion, down from at least €2.3 billion. It attributes the cash-flow cut to the attack and to new Serbian supplier-payment rules.
The company first reported the incident in mid-October, when it disconnected some systems. On October 19 it confirmed a cyberattack and said it had no evidence at that time that customer, associate or partner data was stolen. CEO Frans Muller said the incident mainly affected online capabilities in the Benelux and the US, and Benelux supply-chain operations. He said most of the disruption was contained within two weeks, but full restoration is still ongoing. The company has not disclosed the type of attack and no threat actor has been named.
Detalhes técnicos
The article gives no technical details, such as the attack type, initial access vector or IOCs. The attack came after a prior incident in November 2024, when an INC Ransom ransomware attack hit US brands including Hannaford and Giant Food pharmacies. In that earlier incident, personal information of more than 2.2 million people was compromised.
Remediação
The article does not describe any remediation guidance. The company says incident response and remediation costs will have little effect on its 2026 IFRS operating income.
Linha do tempo
-
Ahold Delhaize estimates €200–250M net sales loss from October 2026 cyberattack, cuts 2026 guidance
ler a análise desta fonte ocultar
Ahold Delhaize, the Dutch-Belgian grocer behind Albert Heijn, Delhaize, Food Lion and Hannaford, estimates that its October 2026 cyberattack will cut fourth-quarter net sales by €200–250 million. It also expects a €75–100 million hit to fourth-quarter underlying and IFRS operating income. The company published the figures with its third-quarter results. As a result it lowered its 2026 guidance: underlying EPS growth is now forecast in the low single digits, and free cash flow around €2.1 billion, down from at least €2.3 billion. It attributes the cash-flow cut to the attack and to new Serbian supplier-payment rules.
The company first reported the incident in mid-October, when it disconnected some systems. On October 19 it confirmed a cyberattack and said it had no evidence at that time that customer, associate or partner data was stolen. CEO Frans Muller said the incident mainly affected online capabilities in the Benelux and the US, and Benelux supply-chain operations. He said most of the disruption was contained within two weeks, but full restoration is still ongoing. The company has not disclosed the type of attack and no threat actor has been named.
Technical Details
The article gives no technical details, such as the attack type, initial access vector or IOCs. The attack came after a prior incident in November 2024, when an INC Ransom ransomware attack hit US brands including Hannaford and Giant Food pharmacies. In that earlier incident, personal information of more than 2.2 million people was compromised.
Remediation
The article does not describe any remediation guidance. The company says incident response and remediation costs will have little effect on its 2026 IFRS operating income.