Ahold Delhaize USA Services, the backbone behind supermarkets like Food Lion, Giant Food, Stop & Shop, Hannaford and The Giant Company, suffered a significant cybersecurity breach in November 2024 that has only recently come to light. An unauthorized actor accessed an internal file repository between November 5th and 6th, 2024, compromising records tied to approximately 2.2 million current and former employees, as well as their dependents and beneficiaries.
The sequence of events unfolded when Ahold Delhaize detected unusual activity and immediately initiated a response. Systems were temporarily taken offline, external cybersecurity specialists were brought in, and federal law enforcement was notified. Initial disruptions impacted order fulfilment and pharmacy operations under various banners. Data compromised in the breach included an extensive range of sensitive information: names, addresses, contact details, dates of birth, government-issued ID numbers (such as Social Security and driver’s licenses), bank account data, and health and workers’ compensation records. While not all individuals had every category of information exposed, the variation depended on the specifics stored within each file. Although customer credit card and pharmacy data appear to have been unaffected, the scale of this breach, especially involving employee and health information, places it among the most severe in the food retail sector.
In Maine alone, 95,463 impacted individuals received formal notifications, triggering obligatory state-level reporting. The Identity Care Package provided to those affected includes two years of complimentary credit monitoring and identity protection services through Experian. Nonetheless, cybersecurity experts emphasize that individuals remain vulnerable to future identity theft or social engineering attacks. Erich Kron from security firm KnowBe4 warned that the sheer breadth of stolen data “poses a significant threat,” and encouraged affected parties to monitor their credit reports actively or file fraud alerts or freezes. The ransomware group known as “Inc Ransom” later claimed responsibility, releasing around 800 GB of stolen files on its Tor-based leak site, a fraction of the total 6 TB it reportedly obtained. Ahold Delhaize’s refusal to pay a ransom underscores its decision to fight back rather than concede to cybercriminal demands.
Since the incident, the company has reiterated its commitment to strengthening data protection. Ahold Delhaize’s official security framework incorporates round-the-clock monitoring, annual audits and penetration testing, continuous staff training, and third-party vendor evaluations, all aimed at preventing future attacks. Ahold Delhaize also announced plans to publish its 2025 Q2 results on August 6th, 2025, a forum likely to highlight updated investments in cybersecurity measures. As the company continues to manage the impact of the breach, its handling of transparency, accountability, and long-term security upgrades will play a central role in restoring trust across its workforce and retail network.
(847) 277-9500