Summary
- Albert Heijn restored its website and Mijn AH app on 18 October.
- Some customer account functions are available again, but online grocery ordering remains unfinished.
- The update concerns recovery from an incident first disclosed earlier in October, not a new attack.
Dutch supermarket chain Albert Heijn says its website and Mijn AH customer app returned on 18 October following the cybersecurity incident that forced parts of its digital operations offline a week earlier. Online grocery ordering remains among the functions that the retailer is working to restore, leaving the recovery incomplete despite the return of customer account access.
The company’s Dutch-language incident statement, updated at 13:20 local time on Sunday, says customers can again access their personal Mijn AH environment. Available functions include Mijn Tegoed, with saved-value features such as koopzegels and Air Miles. Albert Heijn has not said that every function available before the incident is working again, and specifically identifies grocery ordering as outstanding.
Albert Heijn, Etos, and Gall & Gall were affected by a cybersecurity event first reported on 11 October. The operators took preventive action to protect their IT environments, including temporarily switching off systems. The restoration announced on Sunday is a new operational milestone in an already reported incident rather than evidence of a separate compromise.
Online orders depend on connected stock, pricing, customer identity, delivery scheduling, payment, and back-office processes; customer sign-in can therefore recover before fulfilment is ready. Restoring access to a consumer account therefore does not necessarily mean that order placement, fulfilment, and collection arrangements have been cleared to operate together. The retailer’s phased return is consistent with the need to re-establish several interdependent functions, although it has not disclosed the technical sequence of its recovery.
Restoration proceeds in stages
The Dutch group’s difficulties have extended beyond an inaccessible website. Earlier reporting described interrupted online delivery services and disruption affecting grocery operations, while physical shops remained open. The operator has given public updates as components become available. Those service statements are a more reliable measure of the present customer impact than claims about the attacker’s identity or technical method, neither of which has been established by the company in sufficient detail.
Cyber Insider reported the initial Ahold Delhaize system shutdown on 13 October. That article described containment and the limited information available about the cause. The new announcement concerns what has returned, what remains unavailable, and how cautiously the operator is reintroducing digital access.
An extended outage can affect more than missed online sales. Retailers may need to deal with postponed orders, changes to available collection or delivery slots, additional customer contacts, and shifts in demand to physical stores. These are operational possibilities, not losses that Albert Heijn has quantified. Any assessment of financial exposure will require information beyond the current service updates.
Public disclosures have also been limited on data exposure. The company has not confirmed a personal-data breach in the latest statement. An extended incident investigation and the restoration of services are separate processes, and the resumption of account access alone cannot establish whether sensitive information was accessed earlier.
The return of a loyalty balance or savings feature also creates a different expectation from the return of an ordering service. Customers can see information they associate with their account, while the transaction paths they previously used may not yet be available. The statement lists restored functions so that customers can distinguish access from full operational recovery. Albert Heijn has not identified which back-end systems remain isolated, and its statement does not establish whether full ordering functionality will return when deliveries start to resume. Online ordering has not reopened, and the company has not guaranteed full recovery during the planned phased resumption.
Albert Heijn says work continues to return remaining features, including online grocery orders. Albert Heijn expects grocery delivery to resume gradually on Friday 23 October, while all existing orders through Thursday 22 October have been cancelled and new orders remain unavailable. That is a planned resumption, not confirmation that delivery capacity has recovered.
