Cyberattack to Cut Ahold Delhaize Q4 Sales by Up to $282 Million

Ahold Delhaize expects an October cybersecurity incident to strip between $225 million and $282 million from fourth-quarter net sales companywide, the Netherlands-based grocery operator disclosed November 5 alongside third-quarter results that showed U.S. sales up just 1.1% at constant exchange rates.

The sales hit comes with an operating income haircut of roughly $85 million to $113 million, split across both underlying and IFRS measures. That is the difference between a decent quarter and a lowered forecast. The company now expects low-single-digit growth in diluted underlying EPS at constant currency, down from its earlier mid- to high-single-digit guidance.

For a distributor or supplier watching the channel, the numbers land on an already-thin quarter.

What did Q3 actually deliver?

U.S. net sales totaled approximately $15.3 billion, up 1.1% at constant rates and 2.6% at actual rates. Comparable sales excluding gasoline rose 0.5%. In plain terms, nearly all the reported growth came from exchange rates and new selling space, not from existing stores selling more.

The company said several factors held back comparable growth by about 1.5 percentage points:

• Lower SNAP benefits, which squeeze food budgets in the chain's core East Coast markets
• A cyclospora outbreak affecting produce
• Egg price deflation

Pharmacy pricing changes tied to the Inflation Reduction Act cut another 0.6 percentage points from growth. A grocer's pharmacy is usually a traffic driver, so a policy-driven revenue dip there ripples into front-of-store volumes.

Where is the margin pressure coming from?

U.S. underlying operating margin came in at 4.3%, down 0.3 percentage points year over year. The company blamed the decline on prior-year nonrecurring items, price investments, higher utility costs and indirect costs from higher energy prices. A favorable pharmacy sales mix partially offset those pressures.

Put differently: the retailer is spending margin on price to defend share while energy costs eat into the rest. That combination rarely reverses quickly, and suppliers should expect continued pricing scrutiny.

U.S. IFRS operating income was approximately $698 million, a 4.6% margin. The gap above the underlying result came primarily from a pension settlement — a one-time accounting gain, not an operational improvement worth pricing into any forecast.

What does the cyberattack change?

The October incident disrupted online operations in both the United States and the Benelux region, plus supply-chain operations in Benelux. Ahold Delhaize took some systems offline as a precaution while it assessed and contained the breach.

Most of the disruption was contained within two weeks, the company said, though full restoration work continued and the incident affected its ability to serve customers normally.

The exposure matters beyond one retailer. Ahold Delhaize runs some of the largest grocery distribution networks on the U.S. East Coast, and an attack that forces systems offline — even precautionarily — interrupts ordering, replenishment and delivery slots across thousands of stores. Vendors shipping into those networks will feel the Q4 drag in their own order books.

The company said additional response and remediation costs should have only a marginal effect on 2026 IFRS operating income, framing the containment expense as manageable.

Is online still the growth engine?

Yes, and it is the clearest structural signal in the release. U.S. online sales grew 14.2% in the quarter — the 10th straight quarter of double-digit growth. Food Lion led the U.S. brands with online sales growth above 20%.

That is two-plus years of compounding digital volume against essentially flat store comps. For suppliers, it means digital shelf placement, e-commerce trade spend and pickup-and-delivery pack sizes increasingly decide real sell-through.

The catch: online is precisely where the cyberattack hit hardest. Q4's digital growth rate will show whether demand deferred or demand disappeared.

Ahold Delhaize's next disclosure will effectively be a read on how fast a $15.3 billion-per-quarter U.S. business can rebuild customer confidence — and order flow — after a two-week systems outage.