Ahold Delhaize USA Services, LLC detected unauthorized access to an internal U.S. file repository on November 6, 2024. Files were taken from this repository between November 5 and 6, 2024. The company has stated it is informing affected individuals as required by regulations.
Exposed data types include name, contact information, date of birth, government-issued ID numbers (such as Social Security, passport, and driver’s license numbers), financial account information (such as bank account numbers), health information (including workers’ compensation and medical information), and employment-related information. The breach affected 2,242,521 individuals. Official breach reports confirm that notices were filed with state Attorneys General, including Indiana and Rhode Island, with notifications to consumers beginning on June 26, 2025.
Further details related to the incident and the full scope of individuals affected may emerge over time as investigations continue. The company is offering two years of credit monitoring and identity protection to those affected.