Ahold Delhaize Says Cyberattack Could Cut Q4 Sales by €250m

Ahold Delhaize says an October cybersecurity incident could reduce its fourth-quarter net sales by between €200 million and €250 million. The Dutch-Belgian supermarket group has now put a financial figure on a disruption that had already become visible to shoppers, showing how an attack on retail systems can move from the IT department into a company’s revenue forecast.

In its third-quarter results published on Wednesday, the company estimated a €75 million to €100 million reduction in fourth-quarter underlying and IFRS operating income. It said additional response and remediation costs would have only a marginal impact on full-year operating income. These figures are estimates for the current quarter, not booked losses or a disclosed ransom payment.

The retailer has revised its full-year outlook. It now expects underlying operating margin to approach 4.0%, rather than be around 4.0%, while underlying earnings-per-share growth at constant exchange rates is expected to be in the low single digits instead of the mid to high single digits. Free cash flow guidance has fallen from at least €2.3 billion to around €2.1 billion.

Ahold Delhaize first disclosed the cybersecurity incident on 12 October and issued a further status update on 19 October. The latest guidance provides a clearer measure of the commercial damage than the early operational notices did. A loss of sales does not necessarily mean every affected customer permanently stopped shopping with its brands, but it shows how much trading can be interrupted while systems are restored and services normalise.

The group operates supermarket and online retail brands across Europe and the United States. That scale makes reliable digital operations essential to stock management, online orders and checkout. For a food retailer, delayed availability or a degraded shopping experience can quickly become lost sales because customers can buy the same basket elsewhere.

The financial estimate should not be treated as proof that Ahold Delhaize’s October intrusion caused every recent refrigeration malfunction reported at European supermarkets. TechBooky has separately covered temperature-control incidents across several countries, including at Delhaize stores. Investigators have not established that the incidents share one attacker or technical cause.

What is clear from the earnings update is that cyber resilience has become a measurable business issue. Investors can now compare the cost of interrupted sales and lower profits with the much smaller direct remediation charge. The final impact will depend on how smoothly the group trades through the rest of the quarter and whether its current estimate changes.