iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Ahold Delhaize and its Dutch retail brands Albert Heijn, Etos, and Gall & Gall confirmed a cybersecurity incident on October 12, 2026. Stores remained open, but some online, customer-service, logistics, and loyalty services were temporarily unavailable. The companies said they were investigating; their public statements did not confirm whether customer data had been accessed or stolen.
Which European retailers confirmed cyber incidents?
The confirmed current incident is in the Netherlands. On October 12, 2026, Ahold Delhaize said it was dealing with a security issue in its network. Its Dutch brands Albert Heijn, Etos, and Gall & Gall also described a cybersecurity incident. The companies’ statements did not identify an attacker or explain the method or full scope of the incident. Ahold Delhaize’s statement and Gall & Gall’s update are the relevant company sources.
The Dutch incident is distinct from cyberattacks affecting UK retailers in May 2025. The UK Information Commissioner’s Office (ICO) said on May 2, 2025, that it had received reports from Marks and Spencer plc and the Co-op Group, was making enquiries, and was working with the National Cyber Security Centre. The Netherlands’ NCTV later described the UK events as part of a broader retail campaign that also included Harrods. The sources cited here do not establish a connection between those 2025 incidents and the 2026 Dutch incident.
| Date and location | Retailers | Confirmed effects and data findings |
|---|---|---|
| October 2026, Netherlands | Ahold Delhaize; Albert Heijn, Etos, and Gall & Gall | Stores remained open; some digital and operational systems were temporarily unavailable. The company statements did not confirm customer data access or theft. Investigation and restoration were ongoing. |
| May 2025, United Kingdom | Co-op, Marks and Spencer, and Harrods | The NCTV’s 2025 assessment described these as victims of a broader campaign. It reported that Co-op said attackers stole data belonging to 6.5 million customers and that the incident disrupted operations, leaving some stores with empty shelves. Those findings concern the 2025 events, not the 2026 incident. |
Sources: Ahold Delhaize, Gall & Gall, the ICO statement of May 2, 2025, and the NCTV Cybersecurity Assessment 2025.
#1 Best Overall
Are Albert Heijn, Etos, and Gall & Gall open?
Yes, according to the companies’ October 12 statements: stores remained open. That does not mean every service was operating normally. Ahold Delhaize said it took some systems offline as a protective measure. Gall & Gall said Albert Heijn, Etos, and Gall & Gall had been dealing with the incident since Sunday afternoon and had temporarily switched off some systems as a precaution.
Are the retailers’ websites, apps, and online services working?
Gall & Gall reported temporary unavailability affecting websites, apps, customer service, logistics systems, and personal benefits and loyalty systems. It did not provide a restoration timetable and said it could not yet say when services would return. The statement was last updated October 12, 2026, at 11:30 local time in Europe/Amsterdam; service status can change, so check the retailer’s current official updates before relying on a particular function.
The companies described the system shutdowns as precautionary and said they were working to restore services. Their statements do not establish that every listed service was unavailable to every customer throughout the incident.
Free tools Windows power users keep installed
One-click scans. No signup required.
Has customer data been stolen?
The October 12, 2026 statements do not confirm that customer data was accessed or stolen. Gall & Gall said the companies were focused on protecting customer, employee, and partner data, but did not report a confirmed data loss. No confirmed attribution, attack method, or full scope was provided, and the investigation was ongoing. Treat claims about data exposure as unconfirmed unless the retailers issue a further statement.
The 6.5 million customer figure belongs to the separate May 2025 Co-op incident: the NCTV’s 2025 assessment reported that Co-op said attackers stole data belonging to that many customers. It is not an estimate for Ahold Delhaize or its Dutch brands.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should customers do?
- Check official retailer updates. Use the affected retailer’s own website or app when available for current service status and any instructions. The ICO also advises customers to follow retailer updates and act on the retailer’s advice if it confirms personal information was affected.
- Use a strong, unique password. The ICO’s guidance is: “Make sure your accounts are protected by a strong password and that you are not using the same password across multiple accounts.” A password manager is an optional way to create and store unique passwords; it does not fix the retailers’ incident or establish that an account was compromised.
- Follow any later notice directly. If a retailer confirms that personal information was affected, follow its specific advice rather than assuming the current statements establish a breach.
The ICO’s customer guidance was issued in connection with the May 2025 UK incidents, but its advice on unique passwords and official updates is general. Read the ICO statement and advice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
