Ahold Delhaize Says No Evidence Customer Data Was Taken in Cyber Incident

No evidence of stolen customer data

Ahold Delhaize says it has no evidence that customer or associate data was taken during the recent cybersecurity incident affecting the company. Systems across various Ahold Delhaize brands are being brought back online, and the food retailer says it is cooperating with the appropriate authorities and stakeholders. In a press release, the company said internal teams and external cybersecurity experts are still investigating the scope of the incident. "Although our investigation is still ongoing, we have no evidence at this moment that customer and associate data was taken in this cybersecurity incident," the retail company said.

Logistics disruption hits online orders and shelves

Albert Heijn, one of Ahold Delhaize's brands, has been dealing with a cybersecurity incident since Sunday. As a precaution, some logistics systems were taken offline, meaning customers cannot order groceries online for delivery, and there have been reports of empty shelves. The company said it is carrying out a controlled re-launch of some of its systems. "We recognize that these actions have caused disruption for customers, associates and partners, but protecting our infrastructure is a top priority," Ahold Delhaize said, promising to provide further updates as it sees fit.

Affected brands and reported server traffic

Drugstore chain Etos, liquor store chain Gall & Gall and all Ahold Delhaize businesses in the United States, including Food Lion, Giant Food, Hannaford, Stop & Shop and The GIANT Company, have also been affected. Anonymous sources in the cybersecurity community report that Albert Heijn identified suspicious traffic originating from servers located in Moldova, Poland, Turkey and the United States. Cybersecurity expert Pim Takkenberg told Dutch news outlet NOS that Albert Heijn apparently has evidence of the hackers' infrastructure, which was used to scout out systems or steal data from Albert Heijn's systems. He added that servers belonging to Ahold's US division may also be involved, possibly used to attack Dutch systems, although this has not been officially confirmed.

Sources: Cybernews