All About Cookies is an independent, advertising-supported website. Some of the offers that appear on this site are from third-party advertisers from which All About Cookies receives compensation. This compensation may impact how and where products appear on this site (including, for example, the order in which they appear).
All About Cookies does not include all financial or credit offers that might be available to consumers nor do we include all companies or all available products. Information is accurate as of the publishing date and has not been provided or endorsed by the advertiser.
The All About Cookies editorial team strives to provide accurate, in-depth information and reviews to help you, our reader, make online privacy decisions with confidence. Here's what you can expect from us:
- All About Cookies makes money when you click the links on our site to some of the products and offers that we mention. These partnerships do not influence our opinions or recommendations. Read more about how we make money.
- Partners are not able to review or request changes to our content except for compliance reasons.
- We aim to make sure everything on our site is up-to-date and accurate as of the publishing date, but we cannot guarantee we haven't missed something. It's your responsibility to double-check all information before making any decision. If you spot something that looks wrong, please let us know.
A cybersecurity ‘incident’ at Ahold Delhaize has left Stop & Shop and Food Lion shoppers scrambling to access online orders and digital coupons.
Ahold Delhaize disclosed the security issue within its network on Oct. 12. In an update published Oct. 13 and updated Oct. 14, it said it had taken some systems offline as a precaution and was beginning a controlled relaunch of certain systems.[1]
The company hasn’t yet disclosed what caused the issue or whether ransomware was involved.
As of Oct. 19, Stop & Shop, Food Lion, Hannaford, Giant Food, and The Giant Company websites still displayed outage notices saying their websites and apps were unavailable.
How to protect your accounts during the grocery app outage
Was customer data stolen in the Ahold Delhaize incident?
There is no confirmed data theft in the company’s latest published update.
“We have no evidence at this moment that customer, associate and partner data was taken in this cybersecurity incident,” Ahold Delhaize said.
The investigation could produce new findings. For now, an unavailable app alone does not establish that your password, saved payment information, or other account details were stolen.
Ahold Delhaize has disclosed data theft from a separate incident in November 2024. Its U.S. services business said an unauthorized party obtained internal files containing personal information about certain current and former employees, their dependents and beneficiaries, and other people.
Depending on the person, the files included information such as Social Security numbers, bank account details, and health information in employment records.
How to protect your accounts during the grocery app outage
You can take a few practical steps without assuming your information has been exposed.
Check orders and charges
Save order confirmations and review your payment account for any groceries you were charged for but did not receive. Contact the retailer through a known channel to ask about the order or a refund. Keep a record of what customer service tells you and when to expect the money.
If you spot an unauthorized transaction, contact your bank or card issuer promptly using its official app or the number on your card.
Verify refund and security messages
Be careful with unexpected texts or emails asking you to sign in to fix an order, claim a refund, or restore your grocery account. The FTC warns that phishing messages often claim there is a problem with an account or payment to get people to click.
Go directly to the retailer’s website or use contact details you already trust. Avoid entering your password or payment information through a link in an unexpected message. These are general phishing precautions; a scam campaign connected to this outage has not been established.
Replace reused passwords
If your grocery account shares a password with your email, bank, or another service, give those accounts different, strong passwords. Reuse allows someone who obtains one password to try it elsewhere.
A password manager can help you keep track of unique logins.
When the grocery account becomes accessible, replace its password if you have reused it elsewhere. Enable two-factor authentication wherever it is offered, especially on your email account, which may receive password-reset messages.
If you already entered a password on a suspicious page, change it through the real service and update any other accounts that used it. If you shared financial information or sent money, contact your financial institution promptly and report the scam at ReportFraud.ftc.gov.