Ahold Delhaize (Organization): news timeline & CVEs

Risky Bulletin: Spyware chip found in Ledger crypto-wallets

Spy chips in Ledger Nano X wallets sold via CryptoBilis stole seed phrases and over $86 million.

Tibane Labs reported spy chips soldered into Ledger Nano X wallets sold by Southeast Asian reseller CryptoBilis, intercepting on-screen seed phrases and sending them to attackers over a built-in modem and eSIM. Ledger linked the backdoored devices to more than $86 million in stolen crypto and told customers to discard affected wallets and move funds; it paused work with CryptoBilis. Newer implants use a painted flex PCB, and at least one Ledger Flex bought at Singapore Airport was also reported implanted. The same bulletin also covers freezer tampering at French supermarkets including Intermarche, an Ahold Delhaize outage, and a Meta GitHub breach affecting more than 1,500 US employees.

Risky Business NewsOct 14, 03:02 UTC · 3d agoMalware in the wild2· 1 read

European Retail Firms Confirm Cyber Incidents

Ahold Delhaize, TFG, and ASOS confirmed cyber incidents, with ASOS reporting access to customer contact data.

Several European retailers confirmed separate cyber incidents in mid-October 2026. Ahold Delhaize took systems offline after a security issue affecting Albert Heijn, Etos, and Gall & Gall, while The Foschini Group investigated an incident at TFG London impacting Phase Eight, Hobbs, and Whistles and said payment data did not appear at risk. ASOS confirmed unauthorized access to third-party customer-communication platforms, exposing names, contact details, and some non-personal account data, but not payment cards or passwords. Separately, attackers tampered with refrigeration controls at French supermarkets, causing food losses estimated in the hundreds of thousands of euros. H&M found no evidence its environment was compromised.

Infosecurity MagazineOct 13, 14:00 UTC · 3d agoData breach in the wild2· 1 read

Cyberattacks crank French supermarket refrigeration systems up to 50°C

Cyberattacks pushed French supermarket fridges to 50°C, spoiling food across hundreds of stores.

Cyberattacks on supermarket refrigeration controllers in France reportedly raised temperatures to 50°C (122°F), spoiling food at hundreds of stores and in some cases starting fires. Carrefour, Intermarché (about 150 stores), Monoprix (about 5% of 490 stores), and Coopérative U (80 of 2,000) were among those affected. Danfoss said impacted equipment ran outdated firmware. CERT-FR reported numerous compromises of AK-SM and AK-SC controllers and advised isolating them, resetting, patching, and rotating credentials. Claroty had previously found a predictable date-based admin bypass in the AK-SM 800A, but authorities have not confirmed that flaw was used. Coopérative U said it is not a Danfoss customer. Separately, Ahold Delhaize reported an unlinked cybersecurity incident disrupting Dutch grocery digital services and stock.

The Register · Securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 13, 12:00 UTC · 3d agoExploit / PoC in the wild 19 sources

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Attackers hijacked Danfoss refrigeration controllers at hundreds of French supermarkets, spoiling frozen stock; Ahold Delhaize separately hit by disruptive incident.

Attackers remotely hijacked Danfoss refrigeration control systems overnight at hundreds of French supermarkets including Intermarché, Netto, Super U, Leclerc, Carrefour Market and Monoprix, warming freezers and destroying chilled/frozen goods with per-store damage of tens to hundreds of thousands of euros. Claroty Team82 disclosed flaws in Danfoss AK-SM 800A and Copeland XWEB Pro web management interfaces in August 2026 that were since patched, but it is unconfirmed whether they were exploited here. Separately, Ahold Delhaize confirmed a security issue disrupting Albert Heijn, Etos, Gall & Gall and Delhaize stores in the Netherlands and Belgium, halting distribution centers and knocking websites and apps offline.

Help Net Securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 16:07 UTC · 4d agoExploit / PoC in the wild 19 sources

Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident

Ahold Delhaize took systems offline after a network security issue, disrupting online services for Albert Heijn and U.S. chains; no attacker confirmed.

Ahold Delhaize disclosed on October 12, 2026 that it took some systems offline after identifying a security issue within its network, describing the shutdowns as protective measures. Albert Heijn's website, app, and home delivery service became unavailable, with Etos, Gall & Gall and logistics systems also affected, while websites for U.S. chains Food Lion, The Giant Co., Giant Food, Hannaford and Stop & Shop were down. Physical stores stayed open with checkout systems working, though app-linked discounts were paused. The company has not identified an attacker, entry point, ransomware, or data theft, leaving cause and scope unresolved.

Cyber Security NewsOct 12, 15:12 UTC · 4d agoData breach 2 sources1· 1 read

Retail giant Ahold Delhaize takes systems offline after cyberattack

Ahold Delhaize took systems offline after a cyberattack, disrupting apps and scheduling at US and European grocery chains.

Ahold Delhaize, which operates more than 9,400 stores and reported over $104 billion in 2024 net sales, said a network security incident forced it to take some systems offline while stores stayed open. Stop & Shop employees reported trouble reaching schedules and pay stubs, and customers could not use websites and apps for Albert Heijn, Etos, and Gall & Gall in the Netherlands and Delhaize in Belgium. Food Lion told US stores they might be unable to shop, stage, or hand off orders. The company did not confirm encryption; a November 2024 INC Ransom attack previously exposed data on more than 2.2 million people.

BleepingComputerupdated Oct 12, 15:12 UTC · 4d agofirst Oct 12, 13:51 UTC · 4d agoData breach in the wild 2 sources3

Ahold Delhaize

Timeline6 articles

Appears with