Cyberattack Prompts Ahold Delhaize to Disconnect Systems

Ahold Delhaize suffered a cyberattack severe enough to force the deliberate disconnection of IT systems — a reactive containment measure that itself disrupted deliveries and online orders across Belgium and the Netherlands. The incident is compounded by the fact that the company experienced a ransomware attack just months earlier in November 2024, which exposed the personal data of over 2.2 million individuals, suggesting that post-incident remediation was incomplete or insufficiently hardened. Repeated attacks on the same organization signal a failure to fully address root causes after the first breach, including likely gaps in network segmentation, threat monitoring, and data protection controls. This matters because operational disruption at a large grocery retailer has real-world supply chain consequences for consumers, and repeated data exposures carry significant regulatory liability under GDPR. Organizations must treat a first incident as an urgent signal to overhaul — not just patch — their security posture.