Ahold Delhaize says it is restoring services disrupted by a cyberattack, with many websites and apps in Europe reportedly back online. According to the report, the company expects affected e-commerce brands in the US to be restored within days.
While the available information is limited, the case is relevant for European businesses because it shows how a cybersecurity incident can disrupt not only internal systems, but also public websites, mobile apps and online sales channels.
What happened
SecurityWeek reported that Ahold Delhaize has been recovering from a cyberattack that affected digital services. The company has reportedly restored many of its European websites and apps, and said some US e-commerce services should return in the coming days.
Based on the source information, it is clear that customer-facing digital platforms were affected. However, the report does not provide full technical details about the nature of the attack, the exact systems involved, or whether customer data was compromised.
Why it matters for European businesses
For European companies, especially those operating e-commerce, retail platforms or multi-country digital services, the incident highlights a practical risk: cyberattacks can interrupt revenue-generating channels very quickly.
When websites, apps or order systems are unavailable, the impact can extend beyond IT disruption to include:
- lost online sales and disrupted customer journeys
- pressure on customer support teams
- reputational damage if services remain unavailable
- operational problems across logistics, fulfilment or store-connected systems
- increased scrutiny of incident response and resilience planning
This is particularly important for European businesses that depend on integrated digital operations across web platforms, mobile apps, payment systems, cloud services and third-party providers.
Who may be affected
The lessons from this incident are relevant beyond large retail groups. Companies most likely to see similar risks include:
- e-commerce businesses that rely on websites and apps for direct sales
- retail and multi-brand organisations with shared digital infrastructure across regions
- SMEs using centralised platforms for orders, payments or customer accounts
- IT and digital teams responsible for uptime, recovery and security monitoring
- marketing teams whose campaigns and customer acquisition depend on functioning digital channels
Even smaller businesses can face similar disruption if an attacker targets a managed hosting environment, SaaS platform, e-commerce stack or connected backend systems.
What companies should consider
Although the source does not provide enough detail to draw conclusions about the attack method, the business implications are clear. Companies should review whether they are prepared to maintain or recover customer-facing services during a cyber incident.
- Review incident response plans for website, app and e-commerce outages, not only internal IT failures.
- Test backup and recovery procedures for critical digital services, including storefronts, content systems and customer account functions.
- Map operational dependencies between websites, apps, cloud infrastructure, payment systems and third-party providers.
- Prepare customer communication workflows so service updates can be published quickly during disruptions.
- Assess business continuity measures for online sales, fulfilment and support if primary systems go offline.
- Strengthen security monitoring and access controls across customer-facing platforms and connected environments.
For European organisations, the broader takeaway is that cybersecurity is not only a data protection issue. It is also a continuity, revenue and customer trust issue. Incidents that interrupt digital channels can have immediate commercial consequences, even before full technical details are known.