Grocery conglomerate Ahold Delhaize anticipates a substantial financial setback due to a recent cyberattack. The attack, which disrupted its operations across the United States and the Benelux region, is expected to reduce its fourth-quarter net sales by €200 million to €250 million ($224 million to $280 million).
Financial Projections and Impact
This projection was released alongside the company’s third-quarter financial results, highlighting the attack’s occurrence after the quarter concluded. The cybersecurity breach is also predicted to lower Ahold Delhaize’s fourth-quarter underlying and IFRS operating income by €75 million to €100 million ($84 million to $112 million). Additionally, the company is incurring incident response and remediation costs, though these are unlikely to significantly affect its 2026 IFRS operating income.
Revised Financial Guidance
In light of the cyberattack, Ahold Delhaize has adjusted its 2026 financial guidance. The company now expects its diluted underlying earnings per share to increase at a low single-digit rate, rather than the previously anticipated mid to high single-digit growth. Furthermore, the forecast for free cash flow has been revised to approximately €2.1 billion ($2.36 billion), down from a minimum of €2.3 billion ($2.58 billion). This reduction is attributed to the cyberattack and new Serbian regulations affecting supplier payments.
Details of the Cyber Incident
The cyberattack was first reported in mid-October when Ahold Delhaize detected a security issue and took precautionary measures by disconnecting certain systems. On October 19, the company confirmed the cyberattack but stated that there was no evidence of data theft affecting customers, associates, or partners. According to Frans Muller, the company’s president and CEO, the disruption primarily impacted online services and supply chain operations in the Benelux and the U.S., but most systems were restored within two weeks.
Despite the significant challenges posed by the cybersecurity incident, Muller emphasized that the company’s response underscores its resilience and that the incident does not define its overall business operations. Ahold Delhaize has not yet disclosed the specific nature of the cyberattack.
This is not the first instance of Ahold Delhaize facing such challenges. A ransomware attack in November 2024 affected several U.S. brands, including Hannaford and Giant Food, compromising the personal data of over 2.2 million individuals.
Related incidents in the industry have also highlighted vulnerabilities, such as data breaches impacting Frontline Education and the Florida Student Aid website, emphasizing the growing need for robust cybersecurity measures.
