Cyberattack Takes Down Food Lion, Stop & Shop, Hannaford Websites and Apps

Shoppers across the East Coast found themselves unable to place online orders or access loyalty accounts Wednesday after a cyberattack forced Ahold Delhaize USA to shut down digital systems for its major grocery brands, including Food Lion, Stop & Shop, and Hannaford.

The Belgian-Dutch conglomerate disclosed the breach Monday, saying it took “precautionary measures, including taking some systems offline” after detecting unauthorized activity within its U.S. network. By Tuesday, the company acknowledged it had begun a “controlled re-launch of certain systems,” though websites and mobile apps for all three chains remained largely inaccessible as of Wednesday afternoon.

Food Lion’s website now redirects customers to third-party delivery platforms — Instacart, DoorDash, and Uber Eats — for grocery orders, while promising refunds for any unfulfilled orders placed through its own channels. Stop & Shop and Hannaford have posted similar notices. In-store operations continue normally at most locations, though some pharmacy and pickup services have reported delays.

The incident marks the latest in a string of ransomware and extortion campaigns targeting retail and food-distribution networks. In 2021, a ransomware attack on JBS Foods disrupted meat supplies nationwide. Last year, a breach at Dole Food Co. halted production and shipping for weeks. Grocery chains are particularly vulnerable because they operate on thin margins, rely on just-in-time inventory systems, and maintain vast troves of customer payment and pharmacy data.

Ahold Delhaize has not confirmed whether ransomware was involved, nor has it disclosed whether customer data was exfiltrated. The company said it engaged “leading cybersecurity experts” and notified law enforcement. Under SEC rules adopted in 2023, public companies must report material cybersecurity incidents within four business days of determining materiality; Ahold Delhaize USA is a subsidiary of the Amsterdam-listed parent, which filed a brief notice to Euronext on Tuesday.

For consumers, the outage underscores the fragility of digital grocery infrastructure that expanded rapidly during the pandemic. Curbside pickup and app-based loyalty programs — now standard at major chains — create single points of failure when central systems go dark. Shoppers who rely on digital coupons, prescription refills, or SNAP/EBT integration through store apps have few immediate alternatives.

Ahold Delhaize operates more than 2,000 stores across 23 states under brands that also include Giant Food, Giant Martin’s, and Peapod. The company said it would provide updates as systems are restored but offered no timeline for full recovery.