Dutch-Belgian supermarket group Ahold Delhaize has confirmed that malicious activity was responsible for the cybersecurity incident that disrupted its operations across Europe and the United States, forcing the company to take websites, applications and other computer systems offline.

In an official statement issued on Monday, 19 October, the company announced that it had filed a formal complaint with Dutch police and was cooperating with national cybersecurity authorities. Although physical supermarkets have remained open, the disruption has affected online shopping, deliveries and some distribution operations.

The company said investigators had so far found no evidence that sensitive information belonging to customers, employees or business partners had been taken. However, its investigation remains open, and the identity and objectives of those responsible have not been publicly established.

Online services interrupted across several countries

The disruption began on 12 October, when Ahold Delhaize detected suspicious activity within its information technology infrastructure.

The group responded by taking a number of systems offline as a precaution, affecting most of its retail brands in Europe and the United States. The consequences varied considerably between businesses, with some experiencing prolonged interruption to digital services while others were able to restore operations more quickly.

Albert Heijn, the Netherlands’ largest supermarket chain, has been particularly affected. Its website and mobile application have returned online, but home grocery deliveries are not expected to resume until Friday, 23 October.

Orders scheduled before that date have been cancelled, while the company continues preparations for a gradual restoration of its online delivery service.

The incident also interrupted some supply and distribution arrangements, resulting in shortages on supermarket shelves in parts of the Netherlands and Belgium.

In Belgium, Delhaize has restored its online shopping operations. Certain promotional and personalised services were still experiencing difficulties, although the parent company confirmed that its Belgian e-commerce business was operational again.

Dutch retailers Etos and Gall & Gall have also restored their websites. Meanwhile, several American supermarket brands owned by Ahold Delhaize have continued to experience service interruptions.

The group said it expected additional online services in the United States to become available over the coming days.

Dutch authorities investigate

Ahold Delhaize said it notified the Netherlands’ National Cyber Security Centre within 24 hours of detecting the malicious activity.

The company has subsequently provided updates to the authorities and, on Monday, confirmed that a formal police report had been submitted.

Chief executive Frans Muller defended the decision to shut down digital systems, arguing that the investigation had demonstrated the necessity of taking preventive action.

The company has not identified the perpetrators, confirmed whether ransomware was involved or disclosed the technical method used to gain access to its infrastructure.

These distinctions are important because malicious activity does not necessarily establish that information was stolen or that attackers obtained control over every system subsequently taken offline.

The retailer has instead described a controlled restoration process intended to ensure that affected systems can be brought back into operation without exposing the business to further risks.

Ahold Delhaize operates thousands of supermarkets and related retail businesses, including Albert Heijn, Delhaize, Food Lion, Giant Food, Hannaford and Stop & Shop.

Its geographical reach means that a disruption originating within shared corporate infrastructure can affect several national markets, even where individual retail chains maintain separate commercial operations.

Cybersecurity becomes a supply-chain concern

The attack comes amid increasing scrutiny of the vulnerability of European food retailers to digital disruption.

Earlier this month, investigators in France began examining cyberattacks against refrigeration control systems used by hundreds of supermarkets.

Those incidents reportedly affected equipment at chains including Carrefour, Intermarché and Monoprix, with some retailers forced to discard products after refrigeration systems malfunctioned.

There is no established connection between the French incidents and the attack affecting Ahold Delhaize.

Nevertheless, both episodes illustrate the dependence of modern retail operations on interconnected digital systems supporting stock management, refrigeration, logistics, payments and customer services.

The consequences of a serious cyber incident can extend beyond the loss of access to websites. Interruptions to inventory systems, warehouse operations or communications with suppliers can affect the availability of physical products.

This creates particular difficulties for food retailers, where delays in transport and storage can result in the loss of perishable goods.

European regulatory implications

The incident also draws attention to the European Union’s NIS2 cybersecurity framework, which establishes stricter risk-management and incident-reporting obligations for organisations operating in designated sectors.

Food production, processing and distribution are among the activities covered by the directive, although its application to particular companies and operations depends on the relevant legal definitions and national implementing arrangements.

The legislation requires organisations within its scope to establish appropriate cybersecurity protections, address supply-chain risks and notify competent authorities of significant incidents.

Separately, the General Data Protection Regulation establishes notification requirements where personal-data breaches meet the relevant reporting threshold.

Ahold Delhaize’s statement that it has found no evidence of sensitive data being taken does not conclude the technical investigation, but it means that a confirmed theft of personal information should not presently be presented as a fact.

For the company, the immediate challenge remains restoring online services while maintaining normal supermarket operations. The wider commercial consequences, including the cost of the interruption and its effect on sales, have not yet been quantified publicly.

Belgium’s three regions have reached an agreement with the European Commission to strengthen measures against water pollution, improve wastewater treatment and increase protection against floods and droughts.

The joint statement, signed in Leuven on Monday, 19th October, sets out commitments for Flanders, Wallonia and the Brussels-Capital Region, including action on industrial pollution, pesticides and persistent chemicals such as per- and polyfluoroalkyl substances, commonly known as PFAS.

The agreement was signed by European Commissioner for Environment, Water Resilience and a Competitive Circular Economy Jessika Roswall, Flemish Environment Minister Jo Brouns, Walloon Environment Minister Yves Coppieters and Brussels State Secretary Ans Persoons.

According to the European Commission’s announcement, the agreement follows a detailed examination of Belgium’s implementation of European water legislation and identifies measures requiring greater attention from regional authorities.

European Commission seeks faster implementation

Belgium is the second EU Member State to complete a structured dialogue under a Commission initiative launched in November 2025.

The process is intended to improve implementation of existing environmental requirements rather than establish an entirely new legislative framework.

European water legislation already obliges Member States to assess the condition of their rivers and groundwater, control pollution and prepare management plans intended to improve water quality.

However, achieving the objectives of the EU’s Water Framework Directive remains difficult in several countries, particularly where pollution, agricultural activity and urban development place competing demands on water resources.

Belgium presents additional administrative complications because responsibility for environmental policy and water management is divided principally between three regional governments.

Watercourses also cross regional and international boundaries, requiring cooperation with neighbouring countries.

The Commission’s review examined Belgium’s third generation of river basin management plans and its second generation of flood risk management plans.

Technical discussions identified areas where implementation could be accelerated, particularly regarding pollution controls, water efficiency and coordination between public authorities.

Flanders to address industrial pollution

Under the agreement, Flanders will prioritise investment in water resilience and stronger action against industrial pollution.

The region intends to use its IMPULSE programme to support improvements in water management and pollution reduction.

Industrial discharges are among the issues specifically identified for closer scrutiny.

The joint statement calls for more systematic reviews of permits governing water abstraction and industrial wastewater discharges, particularly where existing activities place pressure on rivers and groundwater.

The agreement also highlights the need to tackle persistent chemical pollution.

PFAS have become a significant environmental concern because many of these substances degrade extremely slowly and can accumulate in water, soil and living organisms.

Certain PFAS compounds have been associated with adverse health effects, although the risks depend on the individual chemical, exposure level and duration.

The Commission’s commitments include stronger action on PFAS and pesticides, alongside improvements in monitoring and pollution prevention.

Agricultural pollution is another area requiring attention.

Fertilisers and pesticides can enter rivers and groundwater through runoff or infiltration, creating difficulties for water treatment and contributing to the deterioration of aquatic ecosystems.

The three regions have agreed to strengthen cooperation with farmers, retailers and researchers to support more sustainable agricultural practices, including expanding markets for organic products.

€300 million for river restoration in Wallonia

Wallonia has committed to continuing investment in river restoration and improved water resilience, with particular attention to the Vesdre basin.

The region intends to use a €300 million loan secured from the European Investment Bank in 2025 to support restoration work.

The Vesdre basin experienced severe flooding in July 2021, when widespread destruction across eastern Belgium exposed weaknesses in flood protection and the management of vulnerable river valleys.

Restoration measures can include improving river channels, reconnecting floodplains and using natural systems to retain water during periods of heavy rainfall.

The regional authorities also intend to support industrial companies investing in water-efficient production technologies and environmental innovation.

These measures are intended to reduce pressure on water resources while helping businesses adapt to changing environmental requirements.

Wallonia has additionally committed to supporting cleaner agricultural practices, consistent with the wider national objective of reducing pollution from fertilisers and pesticides.

Brussels focuses on wastewater treatment

The Brussels-Capital Region will concentrate on improving water governance and wastewater treatment.

Urban wastewater infrastructure is particularly important in densely populated areas, where drainage networks and treatment facilities must accommodate domestic sewage, commercial activity and rainfall.

Heavy precipitation can place additional pressure on combined sewer systems, potentially increasing the risk of untreated or insufficiently treated wastewater entering natural watercourses.

Improving treatment capacity and water management requires investment in infrastructure, monitoring and coordination between the authorities responsible for sanitation and environmental protection.

The Brussels commitments therefore form part of the wider European effort to modernise urban wastewater systems and improve the ecological condition of rivers passing through major cities.

Cross-border water management

The agreement also identifies the need for closer cooperation in the Scheldt and Meuse river basins.

Both river systems cross national boundaries, making their management dependent on coordination between Belgium and neighbouring countries.

Regional governments have committed to supporting the restoration of floodplains and the removal of barriers affecting shared watercourses where appropriate.

The measures are intended to improve the condition of aquatic ecosystems while strengthening natural protection against floods and droughts.

The Commission will support Belgium through initiatives under the European Water Resilience Strategy, including research, digital technologies, technical expertise and assistance in mobilising public and private investment.

However, the joint statement signed in Leuven does not itself establish a new binding regulatory regime or guarantee that all the investments identified will be financed.

Its importance will depend on whether the three regional governments translate their commitments into funded projects, revised permits and measurable improvements in water quality.

For the European Commission, Belgium’s agreement is also part of a wider programme of structured discussions with Member States on compliance with EU water legislation. Further national dialogues are expected as Brussels seeks to improve implementation across the Union.

Brussels, 19 October, (Brussels Morning Newspaper) – Belgium’s federal government is discussing a Belgian police reserve that would receive military training and support civilian officers during violent riots. Defence Minister Theo Francken has proposed the new force following … Read more