Police in the Netherlands have opened a criminal investigation into a cyberattack that paralyzed the IT systems of Albert Heijn’s parent company, Ahold Delhaize, causing widespread disruption to grocery deliveries across the country.
Investigation launched
According to AD.nl, the Dutch National Police announced that a formal criminal case has been opened following the incident, which is believed to be a ransomware‑type attack. The police statement, quoted by the outlet, emphasized that investigators are “working to identify the perpetrators and assess the full extent of the damage.” The investigation is being coordinated with the National Cyber Security Centre (NCSC) and other relevant authorities.
"Police have opened a criminal investigation into the cyberattack that disrupted Albert Heijn’s supply chain," the police spokesperson said.
The NL Times confirmed that the probe is ongoing and that law‑enforcement agencies are collecting digital evidence, interviewing staff and liaising with the retailer’s IT security teams. No arrests have been reported, and the identity of the attackers remains unknown.
Impact on grocery deliveries
The cyberattack, which surfaced in early March, forced Albert Heijn to suspend deliveries to its stores and online customers. The retailer, the largest supermarket chain in the Netherlands with a market share of roughly 35 %, relies on a tightly integrated logistics network that feeds more than 1,000 stores nationwide. The disruption triggered shortages of staple items and prompted long queues at remaining open outlets.
The NL Times reported that deliveries began to resume gradually after nearly two weeks of outage. By the second week of March, the company announced that “grocery deliveries are being restarted,” and that it expects to return to full operational capacity within the coming days.
Corporate response and recovery efforts
Albert Heijn’s management has been publicly communicating updates through its website and social media channels. The retailer confirmed that it is working “around the clock” with external cybersecurity experts to restore its systems and to strengthen defenses against future attacks. In a statement, the company said that it remains committed to “ensuring product availability for Dutch consumers.”
The temporary suspension of deliveries also prompted the Dutch government to monitor the situation closely, given the essential nature of food supplies. While no official government intervention was reported, officials have urged retailers to review cyber‑risk mitigation plans, citing the incident as a reminder of the vulnerability of critical infrastructure.
Broader implications
The incident underscores growing concerns about cyber threats to the retail sector in Europe. According to the NL Times, the attack is among the most high‑profile cyber incidents affecting the Dutch economy this year, and it has reignited debates over the need for stricter cybersecurity regulations for large corporations.
Analysts note that the disruption, while significant, did not lead to any reported injuries or severe public health risks. However, the episode highlighted how quickly a cyber breach can ripple through supply chains, affecting millions of consumers. As the police investigation proceeds, authorities and industry players alike are expected to share findings that could shape future cyber‑defence strategies in the Netherlands and beyond.
In the meantime, Albert Heijn aims to restore “full deliveries” by the end of the week, as it works to rebuild customer confidence and to mitigate the financial impact of the attack, which analysts estimate could run into the tens of millions of euros.
