Albert Heijn Cybersecurity Incident: Deliveries, Refunds and What to Do

Published: 18 October 2026 | Last checked: 20 October 2026 | Reading time: 6 minutes

Albert Heijn Online Deliveries Expected to Restart From 23 October After Cybersecurity Incident

AMSTERDAM, updated 20 October 2026 — Albert Heijn says its home deliveries are expected to restart gradually from Friday 23 October 2026. All online orders are cancelled through Thursday 22 October, and new orders cannot be placed until deliveries resume. The Albert Heijn website and the Mijn AH app have been back online since 18 October, and Ahold Delhaize filed a police report on 19 October.

Albert Heijn, Etos and Gall & Gall have been dealing with a cybersecurity incident since the afternoon of Sunday, 11 October. The physical supermarkets stayed open throughout, and regular store supplies have resumed. Online ordering and customer service remain unavailable, while the loyalty services (Mijn Tegoed, Koopzegels, Air Miles) are working again.

The company says there is currently no indication that personal data has been affected, but its investigation is continuing. Here is what shoppers need to know about cancelled orders, refunds, Bonus discounts and potential phishing messages.

1. What Happened at Albert Heijn?

Albert Heijn, Etos and Gall & Gall have been dealing with a cybersecurity incident since the afternoon of Sunday, 11 October 2026. Their parent company, Ahold Delhaize, said it took precautionary steps to protect its IT environment, including temporarily taking some systems offline.

The incident disrupted digital services and logistics operations. At Albert Heijn, customers could no longer place online grocery orders, while some app-related features, personal discounts and savings programmes became unavailable. The disruption also affected store replenishment earlier in the week.

Albert Heijn has described the event as a cybersecurity incident. Although some media reporting has discussed the possibility of a hack, the company has not publicly confirmed the full technical cause or identified an attacker. The investigation is ongoing, so the incident should not be presented as a confirmed ransomware attack or a confirmed data breach.

By 15 October, Albert Heijn said regular deliveries of both fresh and shelf-stable products to its stores across the Netherlands had resumed. Its 16 October update said stores were again being replenished regularly, with shelves stocked nationwide.
Update, 19–20 October 2026: Ahold Delhaize filed a police report on 19 October, more than a week after the incident, after the police and the Public Prosecution Service had publicly appealed to the company to do so (NOS). The company says it notified the Dutch National Cyber Security Centre (NCSC) within 24 hours of discovering the activity; under the Cyberbeveiligingswet, in force since August, companies must report serious incidents. Ahold Delhaize calls the incident “a malicious action by third parties” and has not named an attacker.

2. Latest Delivery and Store Status

According to Albert Heijn’s update of 19 October 2026 (17:10) and the Ahold Delhaize statement of the same day, the situation is as follows:

Important: 23 October is an expected, gradual restart, not a guaranteed date for every customer. The restart date has moved several times: earlier updates cancelled orders through 18 October, then 20 October, then 22 October. Check Albert Heijn’s official updates before you rely on a delivery date.

For shoppers who need groceries immediately, physical stores remain an option.

3. What Happens to Cancelled Orders?

In its update of 19 October, Albert Heijn says customers who already paid for cancelled orders will be refunded within a few days, without having to do anything. All online orders through Thursday 22 October are cancelled, and no new orders can be placed until home delivery restarts.

Keep your order confirmation, payment record and any cancellation message anyway, in case you need to check the refund. If you need groceries before deliveries resume, shop at a physical supermarket or check another retailer’s delivery availability directly.

4. Are Bonus Discounts and Savings Affected?

Most loyalty services are working again, according to Albert Heijn’s update of 19 October:

• The website and the Mijn AH app have been live again since 18 October.
• Mijn Tegoed, Koopzegels, Air Miles and the pans savings promotion work again, including automatic saving and redeeming. Saved balances were preserved.
• Bonus offers for this week and next are visible, and the AH Premium 10% discount on Bio and AH Terra products is back.
• Shelf labels show correct prices, including current Bonus prices, since 18 October.
• The Postcode Lottery “Schuif lekker aan” gift card can be redeemed again since 18 October; the campaign runs through 25 October.

What you missed during the outage

Missed Koopzegels can be bought in store using receipts from the past week; receipts show in the Mijn AH app after you scan your bonus card. Compensation for missed personal discounts, Air Miles and savings promotions will be announced later and will mostly be automatic. Keep your receipts.

5. Has Customer Data Been Compromised?

As of the latest public statements, Albert Heijn and Ahold Delhaize say there is no evidence at this moment that suggests any sensitive customer, employee or partner data was taken. Ahold Delhaize’s statement of 19 October adds that the investigation is still ongoing.

This is the company’s current assessment, not confirmation that the investigation has been completed. There is no confirmed basis for claiming that passwords, payment details or other personal information were stolen in this incident, and equally the absence of known evidence is not a guarantee that every possible risk has been ruled out.

Remain alert to suspicious messages that use the disruption as a reason to request account details, payment information or urgent action.

6. Watch Out for Phishing Messages

Albert Heijn has warned that criminals may exploit incidents like this by impersonating company employees through phishing. A fraudulent message could claim to offer a refund, restore a Bonus account, confirm a cancelled order or provide compensation.

To protect yourself:

• Be cautious of urgent requests. Do not let a message pressure you into acting before checking whether it is genuine.
• Check links and sender details. A familiar logo or display name does not prove that a message is authentic.
• Use official channels. Type the company’s official website address yourself or use verified company announcements instead of following an unexpected link.
• Do not share sensitive information. Avoid entering passwords or payment details on pages linked from suspicious emails or texts.
• Keep transaction records. Save your order confirmation, cancellation message and receipts until the issue is resolved.

The company has said it will continue communicating through its official statement page, social media channels and in-store information while its customer service is unavailable.

7. What Should Shoppers Do Now?

1. For groceries needed now: visit a physical supermarket. Albert Heijn stores remain open and are being supplied again.
2. For a cancelled order: your payment is to be refunded within a few days without action on your part. Keep your confirmation and payment record.
3. For missing personal discounts or Koopzegels: keep your receipts. Missed Koopzegels can be bought in store with receipts from the past week.
4. For a new delivery: do not place plans on 23 October as a guaranteed date. Albert Heijn expects a gradual restart; check its latest update first.
5. For suspicious messages: do not click unexpected links or share sensitive account details. Verify any claim through official channels.

8. Frequently Asked Questions

Why were Albert Heijn deliveries cancelled?

Ahold Delhaize says it detected suspicious activity in its IT infrastructure on 11 October and took systems offline as a precaution. It describes the incident as a malicious action by third parties. The company has not disclosed the full technical cause.

When will Albert Heijn online deliveries resume?

Albert Heijn expects drivers to return gradually from Friday 23 October 2026. All orders through Thursday 22 October are cancelled. The date has been moved several times, so check the official update.

Can I place a new online grocery order?

Not yet. The website and the app work again, but new orders can only be placed once deliveries resume.

Will I be refunded for a cancelled order?

Yes. According to Albert Heijn’s update of 19 October, customers who already paid will be refunded within a few days, without needing to act.

Are my Bonus discounts, Koopzegels and Air Miles affected?

They work again since 18 October and saved balances were preserved. Missed Koopzegels can be bought in store with receipts from the past week, and compensation for other missed benefits will be announced later.

Has Albert Heijn confirmed a data breach?

No. Ahold Delhaize says there is no evidence at this moment that sensitive customer, employee or partner data was taken. The investigation is ongoing.

Was a police report filed?

Yes. Ahold Delhaize filed a police report on 19 October 2026.

Are Etos and Gall & Gall affected too?

Yes. Their websites are available again according to Ahold Delhaize’s update of 19 October.

Related reading

• Cheapest supermarket in the Netherlands 2026: AH, Jumbo, Lidl and Dirk compared.
• Expat scam guide: the Odido hacker voice: how to recognise phone and phishing scams.
• Dutch at the supermarket: free game lesson with the words you need in the shop.

Official Sources and Further Reading

• Albert Heijn: official cybersecurity incident update (latest: 19 October 2026, 17:10)
• Ahold Delhaize: update on the status of the cybersecurity incident (19 October 2026)
• NOS: delivery restart postponed again, app and website work again
• NOS: parent company files a police report after more than a week
• NOS: earlier cancellation through Tuesday

Editorial note: this article reflects publicly available information as of 20 October 2026, including Albert Heijn’s update of 19 October (17:10). Service status may change. The investigation is ongoing, and no specific attacker or confirmed customer-data breach is asserted here.

9. Dutch Learning Corner

Useful sentence: Mijn bestelling is geannuleerd. Wanneer krijg ik mijn geld terug?
English: My order has been cancelled. When will I get my money back?