Meals retail big Ahold Delhaize confirms that knowledge was stolen from its U.S. enterprise techniques throughout a November 2024 cyberattack.
“Primarily based on our investigation up to now, sure information have been taken from a few of our inside U.S. enterprise techniques,” a spokesperson confirmed to BleepingComputer.
“For the reason that incident was detected, our groups have been working diligently to find out what info might have been affected.”
Ahold Delhaize is a multinational retail and wholesale firm that operates practically 8,000 shops throughout Europe and the US, using over 410,000 folks.
The corporate has reported yearly revenues of roughly $100 billion, and within the American market, it operates beneath manufacturers corresponding to Meals Lion, Cease & Store, Big Meals, and Hannaford.
On November 8, 2024, Ahold Delhaize issued a public assertion disclosing a cybersecurity incident that pressured it to take IT techniques offline for defense.
“This difficulty and subsequent mitigating actions have affected sure Ahold Delhaize USA manufacturers and companies together with numerous pharmacies and sure e-commerce operations,” acknowledged Ahold Delhaize on the time.
Yesterday, the ransomware group INC Ransom added Ahold Delhaize to its knowledge leak extortion website on the darkish net, which included samples of paperwork they allegedly stole from the corporate.

Supply: BleepingComputer
Responding to our request for a touch upon this growth, a spokesperson for the agency confirmed that there had been a data breach however did not touch upon whether or not ransomware was concerned within the assault.
Ahold Delhaize famous that the investigation into the incident stays ongoing, and if buyer knowledge is confirmed to have been impacted, these individuals might be notified accordingly.
“If we decide that private knowledge was impacted, we are going to notify affected people as acceptable. As well as, we’ve notified and up to date regulation enforcement,” acknowledged Ahold Delhaize.
In the meantime, the spokesperson confirmed that each one their shops and e-commerce companies stay open and operational, so clients should not face issues.
INC Ransom has targeted its assaults on U.S.-based organizations these days, with a member tracked by Microsoft as ‘Vanilla Tempest’ focusing on U.S. healthcare suppliers.
Most lately, INC Ransom took duty for an assault on the State Bar of Texas that warned its 100,000 members that hackers had stolen their delicate knowledge.