Food retailer Ahold Delhaize USA has confirmed that the cybersecurity incident that took place on 5 November 2024 exposed the data of 2.24 million people.
The update follows a brief statement issued by the company in April 2025.
The external system breach compromised sensitive customer information including names, Social Security numbers, health info and financial account details such as bank account numbers.
Ahold Delhaize stated: “We are writing to notify you of a cybersecurity issue that may have affected your personal information contained in employment records related to you or your family member.”
“We detected a cybersecurity issue involving unauthorised access to some of our internal US business systems on 6 November 2024. We immediately launched an investigation with the assistance of leading external cybersecurity experts, coordinated with US federal law enforcement, and began taking steps to contain the issue.
“Based on our investigation, we identified that an unauthosised third party obtained certain files from one of our internal US file repositories between 5 and 6 November 2024.”
Following a review of the impacted files, the company confirmed that “some of these files may have included internal employment records containing personal information about you that we obtained in the course of providing services for certain current and former Ahold Delhaize USA companies”.
Ahold Delhaize operates brands such as Food Lion, Giant Food, Hannaford and Stop & Shop. It operates more than 2,000 stores in 23 US states.
According to UK security software company Comparitech, the incident ranks as the eighth-largest ransomware breach on a US company in 2024 and the 11th largest globally.
The ransomware group Inc claimed responsibility, though this has not been verified.
In May 2025, Ahold Delhaize reported net sales of €23.28bn ($26.41bn) in the first quarter (Q1) of fiscal 2025 (FY25) – a 5% rise at constant exchange rates.
“Ahold Delhaize USA 2024 cyberattack exposed 2 million people’s data” was originally created and published by Retail Insight Network, a GlobalData owned brand.
The information on this site has been included in good faith for general informational purposes only. It is not intended to amount to advice on which you should rely, and we give no representation, warranty or guarantee, whether express or implied as to its accuracy or completeness. You must obtain professional or specialist advice before taking, or refraining from, any action on the basis of the content on our site.
