A cybersecurity incident has left customers of Dutch grocer Albert Heijn unable to order deliveries, with the chain canceling orders through Oct. 22 and planning a gradual restart Friday, Oct. 23.
Every online grocery order scheduled for delivery through Thursday has been canceled. Albert Heijn said customers who already paid will receive refunds within several days without submitting a request. Its stores remained open during the disruption.
The incident began on the afternoon of Oct. 11 in the Netherlands. Albert Heijn said it took some systems offline as a precaution, disrupting online shopping and logistics. Regular deliveries to stores have since resumed after an initial interruption.
Albert Heijn restored access to its website and Mijn AH app on Oct. 18. Shoppers can again use features such as loyalty balances and promotions, but they still cannot place grocery orders. The chain has not announced when it will accept new orders.
The interruption affects a major Dutch supermarket chain. Parent company Ahold Delhaize reported that Albert Heijn held 38.2% of the Netherlands’ grocery market in 2025.
Services elsewhere in the group have recovered on a different schedule. Delhaize said in an Oct. 16 update that its delivery and collection services in Belgium and Luxembourg were operating again. Albert Heijn’s online grocery ordering remained unavailable after its website and app returned two days later.
In a statement updated Oct. 14, Ahold Delhaize said it had no evidence that customer, associate or partner data had been taken. Albert Heijn said its investigation into the incident’s nature and cause is continuing.
Ahold Delhaize has scheduled its third-quarter results for Nov. 4 but has not said whether the release will quantify the incident’s cost. Albert Heijn’s next planned step is to bring grocery deliveries back in stages starting Friday.
