🇺🇸 🇳🇱 🇧🇪 🚨 UPDATE: AHOLD DELHAIZE CONFIRMS "MALICIOUS ACTIONS" BEHIND CYBER INCIDENT, FILES POLICE REPORT Follow-up to our earlier posts on the Ahold Delhaize cybersecurity incident. In an Oct 19, 2026 update, the company says its investigation confirmed the suspicious activity in its IT infrastructure "resulted from the malicious actions of others." What the company says (Oct 19): • Filed a formal police report with the Dutch police today; notified the Dutch NCSC within 24 hours of detection • Taking websites and apps offline affected most of its brands across Europe and the US; stores stayed open • Albert Heijn website and app are back; home deliveries expected to resume Friday, Oct 23 • Ahold Delhaize USA e-commerce (Food Lion, Stop & Shop and others) expected back "in the coming days"; Belgium e-commerce fully restored • "No evidence at this moment" that sensitive customer, associate or partner data was taken ⚠️ Analyst Note: The company still has not named the attack type, a threat actor or whether a ransom was involved, and no group has publicly claimed it. Confirming malicious actors plus a police report moves this from a precautionary shutdown to a confirmed attack. Expect phishing that impersonates these grocery brands about refunds, cancelled orders or loyalty points. Source (official): newsroom.aholddelhaize.com/a… #DDW #DarkWeb #AholdDelhaize #AlbertHeijn #FoodLion #StopAndShop #Retail #CyberAttack #CyberSecurity

🇳🇱 🚨 NETHERLANDS: PHILIPS ALLEGEDLY BREACHED, 13.5GB OF DATA LEAKED ON HACKER FORUM A threat actor calling itself "Z-Union" has published a 13.5GB dataset it claims was taken from Koninklijke Philips N.V., the Dutch health technology giant, and is offering it for free download. What we know so far: * Claimed size: 13.5GB * Shared openly as a downloadable dump, not offered for sale * The actor has not described the contents, so it is unclear whether the files include corporate documents, customer records or product data The claim has not been independently verified, and Philips has not publicly confirmed a breach. ⚠️ Analyst Note: Philips makes medical devices and health systems used by hospitals worldwide, so any real exposure of internal files could matter well beyond the company, from GDPR scrutiny to product and supply-chain risk. Until the dataset is examined, treat it as an unverified claim; recycled or third-party data is often relabeled with a big brand name. #DDW #DarkWeb #Netherlands #Philips #DataBreach #ThreatIntelligence

🇳🇱 🚨 NETHERLANDS: THREAT ACTOR CLAIMS TO SELL PICNIC ONLINE SUPERMARKET DATABASE AND SOURCE CODE A threat actor on an underground forum has posted a sale listing for data allegedly taken from Picnic, the online supermarket and grocery delivery service operating in the Netherlands. According to the listing, the offer includes: * Picnic's full database * Picnic's full source code No record count, sample or price was visible in the listing. The claim has not been independently verified. ⚠️ Analyst Note: Picnic delivers groceries to homes, so a real customer database would likely hold names, home addresses, phone numbers and order history, which is ideal material for delivery-themed phishing and fraud. Leaked source code could also help attackers find flaws in the app. With no sample shown, treat this as an early claim. Unverified threat-actor claim, NOT confirmation of a compromise of Picnic systems. Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Netherlands #Picnic #Ecommerce #Retail #DataBreach #ThreatIntelligence