Ahold Delhaize Admits to Significant Data Leak Following INC Ransom Attack

Ahold Delhaize USA has officially confirmed the fact of data leakage from its corporate systems after a cyberattack carried out by the INC Ransom group. The latter, according to them, appropriated 6 TB of internal information. The investigation is ongoing with the participation of law enforcement officials and independent experts.

• Ahold Delhaize, an international concern that owns well-known American supermarket chains Stop & Shop, Hannaford, Food Lion and Giant Food, reported the fact of data leakage from corporate systems in connection with a cyberattack that occurred in the fall of 2024.
• In November of this year, disruptions in the work of online ordering services and incorrect operation of store websites were recorded in the USA. According to preliminary investigation data, the INC Ransom group claimed responsibility for the attack, stating that 6 terabytes of data were stolen.

Although the company has not officially confirmed the amount of stolen information, its representatives emphasized that the consequences for the business were mitigated thanks to the implemented cybersecurity protocols. In the event that personal data is confirmed to have been compromised, the company has pledged to immediately notify all affected parties. The relevant US authorities have been informed of the incident.

Ahold Delhaize is one of the largest players in global retail, operating over 2,000 retail outlets in the US with total revenue of over $24 billion in 2023. The INC Ransom group, which began operating in July 2023, is known for its attacks on European Union government institutions, educational and medical institutions, as well as companies such as Yamaha and Xerox. Analysts are inclined to believe that INC may be a rebranding of the Lynx group, which recently attacked Romania’s largest energy company.

The attack on Ahold Delhaize demonstrates the vulnerability of even large companies with robust cybersecurity systems to organized groups like INC. The theft of internal business data is a particular danger, which can affect not only security but also operational stability. This is another serious signal for retail: strengthening cybersecurity is not an option, but an urgent necessity.