Food retail giant behind several major US supermarket brands confirms data stolen in major ransomware breach

Investigation into Ahold Delhaize breach is still ongoing.

Apr 18, 2025 - 16:20

Food retail giant behind several major US supermarket brands confirms data stolen in major ransomware breach

INC Ransom recently added Ahold Delhaize to its data leak site
The company confirmed losing sensitive data in the attack
The investigation is still ongoing, so users should be wary

Ahold Delhaize, one of the world's largest food retail groups, has confirmed it lost sensitive data from its US business in a November 2024 cyberattack.

The confirmation came after the threat actor responsible, INC Ransom, added the company to its data leak website, sharing sample documents they claim were stolen in the attack.

"Based on our investigation to date, certain files were taken from some of our internal U.S. business systems," an Ahold Delhaize spokesperson told BleepingComputer. "Since the incident was detected, our teams have been working diligently to determine what information may have been affected."

Monitor your credit score with TransUnion starting at $29.95/month

TransUnion is a credit monitoring service that helps you stay on top of your financial health. With real-time alerts, credit score tracking, and identity theft protection, it ensures you never miss important changes. You'll benefit from a customizable online interface with clear insights into your credit profile. Businesses also benefit from TransUnion’s advanced risk assessment tools.

Preferred partner (What does this mean?)View Deal

Under investigation

In early November 2024, Ahold Delhaize disclosed a cybersecurity incident which forced it to shut down parts of its IT infrastructure.

"This issue and subsequent mitigating actions have affected certain Ahold Delhaize USA brands and services including a number of pharmacies and certain e-commerce operations," the company said back then.

The company said that it was still investigating the incident, and if it determines that customer data was taken, it would notify affected individuals.

"If we determine that personal data was impacted, we will notify affected individuals as appropriate. In addition, we have notified and updated law enforcement," Ahold Delhaize added.

Until the investigation concludes, we won’t know how many (if any) customers are at risk, but it’s worth mentioning that Ahold Delhaize is a Dutch-Belgian multinational retail and wholesale holding company, operating some 7,910 stores across Europe, the United States, and Indonesia, and serving around 72 million customers weekly.

The company’s spokesperson told the publication that all of its stores and e-commerce services are open and operational, and that customers should not face any problems as a result of the breach.

Watch out, your work mobile apps could be a huge security risk
Take a look at our guide to the best authenticator app
We've rounded up the best password managers