2024 Grocery Chain Cyberattack Exposed Data of 2.2 Million Employees, Others

Ahold Delhaize USA Services, the Dutch company that owns Stop & Shop and Hannaford grocery stores across New England and others across the country, reported on June 26 that a cyberattack last November likely exposed the personal information of an estimated 2.2 million people.

The company said the affected individuals include certain current and former employees, their dependents and beneficiaries as well as others whose personal information was in its internal business files.

Ahold Delhaize USA said it detected a cybersecurity issue involving unauthorized access to certain internal U.S. business systems on November 6, 2024. Its investigation identified that an unauthorized third party obtained certain files between November 5 and 6, 2024 and that some files may have contained personal information that it obtained in the course of providing services to Ahold Delhaize USA companies.

New England Grocers Stop & Shop, Hannaford Coping With Cyberattack

The files that may have been affected contained different types of personal information such as name; contact information; date of birth; Social Security, passport and driver’s license numbers; bank account number; workers’ compensation and medical information contained in employment records; and employment-related information.

The total number of persons affected is reported to be 2,242,521; the total number in Maine alone is 95,463.

The company is directly notifying affected individuals through a written letter. It has also arranged for complimentary credit monitoring and identity protection services for two years.

According to Recorded Future, the INC ransomware gang took credit for the attack in April.

Stop & Shop has more than 400 stores throughout New York, New England and New Jersey. Hannaford has more than 180 stores in New England and New York. Ahold Delhaize USA also owns Food Lion and Giant Foods.

Topics Cyber