Ahold Delhaize

The Dutch conglomerate Ahold Delhaize, which owns major American supermarket brands, experienced a cyberattack in November that compromised the personal information of over 2.2 million people. Stolen data includes Social Security numbers, passports, financial account information, health information, and other sensitive employment data. The attack left customers unable to place delivery orders online, and several websites were offline. The INC ransomware gang claimed responsibility, stating they stole six terabytes of information. Ahold Delhaize has offered victims two years of credit monitoring services.

Source: https://therecord.media/hackers-cyberattack-grocery-chain

TPRM report: https://scoringcyber.rankiteo.com/company/ahold-delhaize

"id": "aho615062825",
"linkid": "ahold-delhaize",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'More than 2.2 million',
                        'industry': 'Retail',
                        'location': 'USA',
                        'name': 'Ahold Delhaize',
                        'size': 'More than 2,000 stores',
                        'type': 'Corporate'}],
 'data_breach': {'data_exfiltration': '6 terabytes of information',
                 'number_of_records_exposed': 'More than 2.2 million',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'Passports',
                                              'Financial account information',
                                              'Health information',
                                              'Sensitive employment data']},
 'date_detected': '2023-11-06',
 'date_publicly_disclosed': '2023-04-01',
 'description': 'Ahold Delhaize, a Dutch conglomerate behind major American '
                'supermarket brands, suffered a cyberattack in November that '
                'compromised the information of more than 2.2 million people. '
                'The stolen information includes Social Security numbers, '
                'passports, financial account information, health information, '
                'and other sensitive employment data.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'Passports',
                                 'Financial account information',
                                 'Health information',
                                 'Sensitive employment data'],
            'downtime': 'Customers unable to place delivery orders online',
            'systems_affected': 'Online ordering systems'},
 'motivation': 'Data Theft',
 'ransomware': {'data_exfiltration': '6 terabytes of information',
                'ransomware_strain': 'INC'},
 'references': [{'source': 'News Article'}],
 'regulatory_compliance': {'regulatory_notifications': 'Filed documents with '
                                                       'regulators in Maine'},
 'response': {'communication_strategy': 'Two years of credit monitoring '
                                        'services for victims'},
 'threat_actor': 'INC ransomware gang',
 'title': 'Data Breach at Ahold Delhaize',
 'type': 'Data Breach'}