Hannaford app, website still offline over 2 days after company identified security issue

Hannaford’s website and app remain offline as parent company tackles cybersecurity issue

The digital shopping experience for Maine’s largest grocer is still on pause, more than two days after Ahold Delhaize—the Dutch conglomerate that owns the chain—stated it was pulling certain systems offline to protect its internal network. The online ordering platform for Hannaford has been non‑functional since Monday, while physical stores across the state continue to serve customers as usual.

What happened

On Monday night, Ahold Delhaize issued a brief news release saying it was “experiencing an internal network issue” and had temporarily taken some systems offline as a precaution. The announcement singled out Hannaford’s website and mobile application among the services that were disabled. Since then, customers have been unable to place orders directly through the chain’s own channels.

In the early hours of Thursday, a new message appeared on Hannaford’s website explaining that the site was “temporarily offline” and directing shoppers to third‑party delivery services such as DoorDash, Instacart and Uber Eats. A screenshot of that notification was posted online, confirming that the chain was still offering a way to shop for groceries remotely, albeit through outside partners.

Why it matters

Hannaford is a household name in Maine, with roughly 70 stores scattered throughout the state. The company’s parent, Ahold Delhaize, also runs other grocery brands in the United States, including Stop & Shop, Food Lion and Giant Food, and operates more than 2,000 stores nationwide.

The decision to disable online systems reflects the seriousness of the underlying problem. “We are continuing to work with Ahold Delhaize to resolve the issue,” spokesperson Caitlin Cortelyou told a local news outlet by email on Thursday. “We have no evidence at this moment that customer or associate data was taken in this cybersecurity incident.” The message also stressed the company’s awareness of the inconvenience to customers, adding that it was “apologizing for the disruption” and “appreciating our customers’ continued patience and understanding.”

While Cortelyou denied any data loss, Ahold Delhaize has already brought in external cybersecurity experts to investigate the breach and has “engaged with the appropriate authorities” as needed. The firm has not yet confirmed whether the incident qualifies as a data breach under Maine law, which requires notification to the Office of the Maine Attorney General if personal information has been compromised.

The Attorney General’s office had confirmed that, as of Wednesday, neither Hannaford nor Ahold Delhaize had reported the incident. If the investigation finds that the breach involved the exposure of customer or employee data, the chain will be obligated to file a disclosure under state law.

A look back

The issue is not the first time the conglomerate has faced a security scare. In 2024, an Ahold Delhaize breach exposed the personal information of more than 95,000 Maine residents and over 2 million people worldwide. Hannaford disclosed that most of those affected were current or former employees. The 2024 event raised questions about the chain’s cybersecurity protocols and prompted a review of its data protection policies.

The current incident appears to be of a different nature, involving an internal network malfunction rather than a successful cyberattack, though the company’s swift removal of services suggests a cautious approach to prevent any potential exploitation.

How shoppers can still get their groceries

With the chain’s own platform offline, customers have turned to alternative delivery options. DoorDash, Instacart, and Uber Eats all list Hannaford in their grocery categories, allowing shoppers to place orders that are fulfilled by local stores. While these services may come with higher delivery fees or longer wait times compared to ordering directly from Hannaford, they remain a viable solution for those who rely on online shopping.

In addition, Hannaford’s physical locations are operating normally, offering in‑store shopping and pickup options for those who can make a trip. The chain’s spokesperson emphasized that the stores remain open and that staff are available to help customers place orders or answer questions about the outage.

What to watch for next

The company has not yet set a timeline for when the website and app will return to service. Customers and employees are advised to keep an eye on the chain’s social‑media channels and website for updates. The company’s official statements so far stress a focus on security and data protection, with a promise that it will inform the public promptly if a breach is confirmed.

For those who have recently placed orders through third‑party services, it may be worth checking whether the delivery partners are offering refunds or credit if the order cannot be fulfilled due to the outage. The chain’s customer service representatives are reportedly on hand to address any such concerns.

Conclusion

Hannaford’s digital storefront remains shuttered as its parent company grapples with a network issue that could potentially be a cybersecurity incident. While the chain’s physical stores are open and shoppers can still order through external delivery partners, the company’s continued partnership with external cybersecurity experts and its commitment to transparency suggest a cautious and thorough approach to safeguarding customer data. As the investigation unfolds, Maine residents who rely on Hannaford for groceries will likely be waiting for confirmation that their personal information is secure and for a return to the convenience of online ordering.