Ahold Delhaize Puts a Price Tag on Its October Cyberattack: Up to $280 Million in Lost Sales
The grocery giant behind Food Lion and Hannaford says last month’s cyberattack will cut fourth-quarter net sales by about $224 million to $280 million and trim operating income. Here is what the company disclosed with its Q3 results.
When a grocery chain takes systems offline to contain a cyberattack, the damage shows up weeks later in the earnings release. Ahold Delhaize—parent of Food Lion, Hannaford, Albert Heijn, Delhaize and other banners—has now put dollar figures on last month’s incident.
SecurityWeek reports the estimates from the company’s third-quarter results package, which covers disruption in the United States and the Benelux.
The numbers management disclosed
- Fourth-quarter net sales: expected hit of €200 million to €250 million (about $224 million to $280 million).
- Fourth-quarter underlying and IFRS operating income: expected hit of €75 million to €100 million (about $84 million to $112 million).
- Incident response and remediation costs are expected, but management believes they will have little effect on 2026 IFRS operating income.
- 2026 guidance cut: diluted underlying EPS growth at constant exchange rates now projected in the low single digits, down from mid to high single digits previously.
- Free cash flow outlook cut to about €2.1 billion ($2.36 billion) from at least €2.3 billion ($2.58 billion), with the reduction attributed to the cyberattack and to new Serbian supplier-payment rules.
What happened in October
The company first reported detecting a security issue in mid-October and said it disconnected some systems as part of its response. On October 19 it confirmed a cyberattack and said it had no evidence at that time that customer, associate or partner data had been stolen. President and CEO Frans Muller said the steps mainly affected online capabilities in the Benelux and the U.S., plus Benelux supply-chain operations, that most disruption was contained within two weeks, and that work to restore normal operations was still underway when the results were published. The attack occurred after the third quarter had closed, so the sales and income hits land in Q4.
Why the figure matters beyond one retailer
This is not a theoretical “breach cost study.” It is a public company translating two weeks of constrained online and supply-chain operations into hundreds of millions in lost sales and a lowered full-year outlook. Even when management says customer data theft was not evidenced at confirmation time, the business interruption alone is large enough to move guidance.
What this means for your company
If you run retail, wholesale, logistics or any operation that depends on e-commerce and warehouse systems, the Ahold numbers are a useful stress test for your own continuity plan. Ask: if we had to take online ordering or a regional warehouse offline for two weeks, what would that do to sales, overtime, spoilage and customer trust? Cyber insurance, offline payment fallbacks, tested backups and a practiced “systems go dark” playbook matter as much as antivirus. The earnings hit also shows why boards now ask for recovery time objectives in plain dollars, not only in technical severity scores.
Want a practical tabletop that maps a two-week systems outage to your sales, inventory and payroll—not just a generic incident checklist? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
