FlagThis

Ahold Delhaize, the multinational retail and wholesale company with operations in both Europe and the United States, has confirmed a data breach following a cyberattack in November 2024. The company, which owns supermarket brands such as Stop & Shop, Giant Food, Food Lion and Hannaford, acknowledged that certain files were stolen from its U.S. business systems. The breach was claimed by the INC ransomware group, which has threatened to release sensitive information if its demands are not met, according to researchers at Arctic Wolf. The company is currently working with outside forensics experts to determine the exact nature of the compromised data and to comply with legal obligations regarding disclosure to affected individuals.

The cyberattack disrupted e-commerce operations, particularly affecting Hannaford's pickup and delivery services, which were halted for several days. Other U.S. banners also experienced disruptions and reduced availability for e-commerce services due to "system outages." While physical stores remained open and continued to accept most payment methods, including credit cards, Ahold Delhaize took some systems offline to protect them. The company also notified and updated law enforcement about the incident.

The INC ransomware group claims to have exfiltrated approximately 6 terabytes of data from Ahold Delhaize's U.S. division. This data includes sensitive documents and personal identifiers, raising concerns about potential misuse and privacy violations. Ahold Delhaize is advising customers to be vigilant for phishing attempts and fraudulent activity. The company is currently investigating the extent of the breach and is committed to taking necessary measures to contain the situation and prevent further unauthorized access.

ImgSrc: thecyberexpress

References :

• The DefendOps Diaries: Ahold Delhaize Cyberattack: A Deep Dive into the Ransomware Breach
• BleepingComputer: Ahold Delhaize confirms data theft after INC ransomware claims attack
• www.cybersecuritydive.com: Ahold Delhaize confirms data stolen after threat group claims credit for November attack
• www.scworld.com: Data breach confirmed by Ahold Delhaize after INC ransomware claims
• Cyber Security News: Ahold Delhaize data breach in November 2024.
• bsky.app: Food retail giant Ahold Delhaize confirms that data was stolen from its U.S. business systems during a November 2024 cyberattack.
• gbhackers.com: GBHackers articles about Ahold Data stolen
• www.techradar.com: Food retail giant behind several major US supermarket brands confirms data stolen in major ransomware breach
• thecyberexpress.com: Ahold Delhaize USA, the parent company of several well-known American supermarket brands, has confirmed that data was stolen during a cyberattack that took place in the fall of 2024.
• newsroom.aholddelhaize.com: Ahold Delhaize updates statement on Nov. 8, 2024 cybersecurity issue
• Check Point Research: For the latest discoveries in cyber research for the week of 21st April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Retail giant Ahold Delhaize has suffered a cyber-attack resulting in data theft of customer information from its US business systems. The attack, claimed by ransomware group INC Ransom, impacted Ahold Delhaize USA […]
• eSecurity Planet: Retail giant Ahold Delhaize has suffered a cyber-attack resulting in data theft of customer information from its US business systems.
• thecyberexpress.com: The INC Ransom gang claimed responsibility for the cyberattack on Ahold Delhaize.
• Davey Winder: Ahold Delhaize USA, the parent company of several well-known American supermarket brands, has confirmed that data was stolen during a cyberattack that took place in the fall of 2024.

Classification:

• HashTags: #Ransomware #DataBreach #CyberAttack
• Company: Ahold Delhaize
• Target: Ahold Delhaize
• Feature: Data Theft
• Malware: INC
• Type: Ransomware
• Severity: Major