Dutch-Belgian supermarket group Ahold Delhaize has confirmed that malicious activity was responsible for the cybersecurity incident that disrupted its operations across Europe and the United States, forcing the company to take websites, applications and other computer systems offline.

In an official statement issued on Monday, 19 October, the company announced that it had filed a formal complaint with Dutch police and was cooperating with national cybersecurity authorities. Although physical supermarkets have remained open, the disruption has affected online shopping, deliveries and some distribution operations.

The company said investigators had so far found no evidence that sensitive information belonging to customers, employees or business partners had been taken. However, its investigation remains open, and the identity and objectives of those responsible have not been publicly established.

Online services interrupted across several countries

The disruption began on 12 October, when Ahold Delhaize detected suspicious activity within its information technology infrastructure.

The group responded by taking a number of systems offline as a precaution, affecting most of its retail brands in Europe and the United States. The consequences varied considerably between businesses, with some experiencing prolonged interruption to digital services while others were able to restore operations more quickly.

Albert Heijn, the Netherlands’ largest supermarket chain, has been particularly affected. Its website and mobile application have returned online, but home grocery deliveries are not expected to resume until Friday, 23 October.

Orders scheduled before that date have been cancelled, while the company continues preparations for a gradual restoration of its online delivery service.

The incident also interrupted some supply and distribution arrangements, resulting in shortages on supermarket shelves in parts of the Netherlands and Belgium.

In Belgium, Delhaize has restored its online shopping operations. Certain promotional and personalised services were still experiencing difficulties, although the parent company confirmed that its Belgian e-commerce business was operational again.

Dutch retailers Etos and Gall & Gall have also restored their websites. Meanwhile, several American supermarket brands owned by Ahold Delhaize have continued to experience service interruptions.

The group said it expected additional online services in the United States to become available over the coming days.

Dutch authorities investigate

Ahold Delhaize said it notified the Netherlands’ National Cyber Security Centre within 24 hours of detecting the malicious activity.

The company has subsequently provided updates to the authorities and, on Monday, confirmed that a formal police report had been submitted.

Chief executive Frans Muller defended the decision to shut down digital systems, arguing that the investigation had demonstrated the necessity of taking preventive action.

The company has not identified the perpetrators, confirmed whether ransomware was involved or disclosed the technical method used to gain access to its infrastructure.

These distinctions are important because malicious activity does not necessarily establish that information was stolen or that attackers obtained control over every system subsequently taken offline.

The retailer has instead described a controlled restoration process intended to ensure that affected systems can be brought back into operation without exposing the business to further risks.

Ahold Delhaize operates thousands of supermarkets and related retail businesses, including Albert Heijn, Delhaize, Food Lion, Giant Food, Hannaford and Stop & Shop.

Its geographical reach means that a disruption originating within shared corporate infrastructure can affect several national markets, even where individual retail chains maintain separate commercial operations.

Cybersecurity becomes a supply-chain concern

The attack comes amid increasing scrutiny of the vulnerability of European food retailers to digital disruption.

Earlier this month, investigators in France began examining cyberattacks against refrigeration control systems used by hundreds of supermarkets.

Those incidents reportedly affected equipment at chains including Carrefour, Intermarché and Monoprix, with some retailers forced to discard products after refrigeration systems malfunctioned.

There is no established connection between the French incidents and the attack affecting Ahold Delhaize.

Nevertheless, both episodes illustrate the dependence of modern retail operations on interconnected digital systems supporting stock management, refrigeration, logistics, payments and customer services.

The consequences of a serious cyber incident can extend beyond the loss of access to websites. Interruptions to inventory systems, warehouse operations or communications with suppliers can affect the availability of physical products.

This creates particular difficulties for food retailers, where delays in transport and storage can result in the loss of perishable goods.

European regulatory implications

The incident also draws attention to the European Union’s NIS2 cybersecurity framework, which establishes stricter risk-management and incident-reporting obligations for organisations operating in designated sectors.

Food production, processing and distribution are among the activities covered by the directive, although its application to particular companies and operations depends on the relevant legal definitions and national implementing arrangements.

The legislation requires organisations within its scope to establish appropriate cybersecurity protections, address supply-chain risks and notify competent authorities of significant incidents.

Separately, the General Data Protection Regulation establishes notification requirements where personal-data breaches meet the relevant reporting threshold.

Ahold Delhaize’s statement that it has found no evidence of sensitive data being taken does not conclude the technical investigation, but it means that a confirmed theft of personal information should not presently be presented as a fact.

For the company, the immediate challenge remains restoring online services while maintaining normal supermarket operations. The wider commercial consequences, including the cost of the interruption and its effect on sales, have not yet been quantified publicly.

The European Parliament is preparing to vote on amendments to the as Brussels seeks to reduce its dependence on foreign suppliers of minerals essential for defence equipment, electric vehicles, advanced electronics and industrial production.

The proposals, scheduled for debate in Strasbourg on Monday, 19 October, and a vote on Tuesday, would strengthen coordination over strategic supplies and revise the responsibilities of European companies that depend on vulnerable international supply chains.

At the centre of the discussions is a proposal to establish a European Critical Raw Materials Centre, which would coordinate purchasing arrangements, assess supply risks and support the development of strategic reserves.

The initiative comes amid increasing concern over China’s dominant position in the processing and supply of several materials regarded as indispensable to European industry.

Parliament considers stronger European coordination

According to the European Parliament’s October plenary briefing, the proposed Critical Raw Materials Centre would operate as an EU body responsible for several functions currently distributed between European institutions and national authorities.

These would include identifying vulnerabilities in supply chains, conducting risk assessments, coordinating contingency stocks and supporting joint purchasing arrangements.

The objective is to give European governments and manufacturers greater capacity to respond to interruptions in supplies of minerals and processed materials that cannot easily be replaced.

The legislative report has been prepared by the Parliament’s Committee on Industry, Research and Energy, with Dutch Social Democrat MEP Mohammed Chahim serving as rapporteur.

The committee examined amendments to the existing legislation during 2026, with its revised report submitted for plenary consideration on 9th October.

Tuesday’s vote is intended to establish Parliament’s position for negotiations with the Council. It would not, by itself, constitute final adoption of the amended regulation.

China’s position creates supply risks

The European Union depends heavily on imported critical raw materials, particularly those required for batteries, permanent magnets, semiconductors and specialist industrial equipment.

China occupies a particularly important position in the refining and processing of rare earth elements, graphite and several other materials used in high-technology manufacturing.

The concentration of production creates vulnerabilities because disruption at a single stage of processing can affect manufacturers operating across multiple European countries.

According to the Council of the European Union’s assessment of strategic mineral supplies, China is the principal supplier to the EU for numerous materials, including gallium, germanium, magnesium and rare earth elements.

These substances are used in applications extending well beyond electric vehicles.

Permanent magnets are required for certain electric motors, wind turbines and defence systems, while other critical materials are used in radar, satellites, aircraft components and advanced electronic equipment.

Restrictions affecting their availability can therefore have consequences for European industrial output, defence procurement and the development of new technology.

The question for EU policymakers is not simply whether minerals can be obtained, but whether Europe has sufficient alternative sources and processing capacity to withstand restrictions imposed by a dominant supplier.

Existing targets remain difficult to achieve

The Critical Raw Materials Act entered into force in May 2024 and established benchmarks intended to strengthen European production and diversify imports by 2030.

Under the existing framework, the EU aims to develop extraction capacity equivalent to at least 10 per cent of its annual consumption of strategic raw materials, where geological reserves allow.

The corresponding benchmarks are 40 per cent for processing and 25 per cent for recycling.

The legislation also seeks to prevent any single non-EU country from supplying more than 65 per cent of the Union’s annual consumption of a particular strategic raw material at any relevant processing stage.

These are policy benchmarks rather than binding production quotas imposed on individual companies.

Their achievement depends on the development of mines, processing facilities and recycling operations, as well as the ability to attract investment.

New extraction projects frequently require lengthy environmental assessments, infrastructure development and extensive capital investment. Processing operations face additional challenges involving energy costs, technical expertise and commercial competitiveness.

Consequently, reducing import dependence involves more than identifying mineral deposits within European territory.

Greater obligations for manufacturers

The proposed amendments also address the responsibilities of major European companies using strategic raw materials.

Under provisions examined by the parliamentary committee, the European Commission would take a greater role in identifying large manufacturers whose operations depend on strategically important supplies.

These companies could face requirements to assess vulnerabilities in their supply chains, including the geographical location of extraction and processing operations and the ownership of relevant facilities.

The arrangements would be particularly significant for businesses producing batteries, aircraft, drones, satellites, advanced chips and other products considered strategically important.

Where significant risks are identified, companies could be expected to consider measures including diversification, improved material efficiency or maintaining stocks.

The proposals also seek to strengthen recycling and the recovery of valuable materials from existing products, reducing the quantity of newly extracted resources required by European industry.

Recycling alone cannot remove the need for imports, particularly where demand for new technologies is increasing, but it can provide an additional source of supply.

Supply security becomes an industrial priority

The legislation forms part of a wider effort to link European industrial policy with economic security.

Brussels has been seeking additional raw materials partnerships with third countries, while manufacturers remain concerned about the commercial cost of building alternative supply chains.

Recent EU discussions concerning cooperation with Vietnam illustrate the emphasis being placed on securing alternative access to minerals such as tungsten and rare earth elements.

However, diversifying supplies does not necessarily mean transferring extraction and processing to Europe. Partnerships with reliable external producers may remain essential, particularly for materials unavailable in sufficient quantities within the Union.

The proposed European centre would therefore have to balance internal production, international purchasing, strategic stocks and commercial demand.

The immediate legislative issue is whether the revised framework gives European institutions sufficient powers to coordinate these activities without placing disproportionate administrative obligations on businesses.

Tuesday’s parliamentary vote will determine the negotiating position MEPs take into discussions with EU governments over how those responsibilities should be distributed.

Volkswagen has spent years trying to build a European battery business strong enough to carry its electric-car ambitions. Its latest deal pulls a Chinese partner deeper into that effort. On September 28, Germany’s Volkswagen and China’s Gotion High-Tech agreed to deepen a partnership that began in 2020. Gotion plans to invest about 1.1 billion euros […]

The post Volkswagen-Gotion deal shows hard limits of China de-risking appeared first on Asia Times.