Supermarket operator Ahold Delhaize delivered better-than-expected third-quarter results, but the good news was quickly overshadowed by a warning that a cybersecurity incident could dent sales and slow profit growth into next year.
The company, which owns chains including Stop & Shop, Giant, and Albert Heijn, said the incident could reduce fourth-quarter sales by €200 million to €250 million. It also flagged that growth in underlying earnings per share for 2026 could slow to the low single digits, a more cautious outlook than investors had hoped for.
What happened in the third quarter?
Ahold Delhaize beat forecasts on both sales and profit for the three months ended September, helped by steady demand for groceries and cost controls. The company did not provide specific figures in the brief, but the beat suggests its core operations remain resilient despite pressure on consumer spending across Europe and the U.S.
Supermarkets generally benefit from consistent demand, as people need to buy food regardless of the economic climate. However, margins are often thin, and retailers face headwinds from higher labor costs, food inflation, and competition from discounters.
The company's performance echoes a broader theme in the sector: grocers are managing to hold up better than many other consumer businesses, but they are not immune to shocks. For context, other European consumer companies have recently had mixed results—some, like Coca-Cola HBC, have raised outlooks on resilient demand, while others have cut guidance due to cost pressures.
The cybersecurity incident and its impact
The cybersecurity incident is the main reason for the cautious outlook. Ahold Delhaize said it could trim fourth-quarter sales by €200 million to €250 million. That is a meaningful hit for a company that generates tens of billions in annual revenue, though it represents a small fraction of total sales.
Cyberattacks on retailers have become more common in recent years. When a company suffers a breach, it often has to shut down parts of its IT systems, which can disrupt online ordering, payment processing, and supply chain operations. That can lead to lost sales, as customers may shop elsewhere if they cannot complete transactions.
The company did not specify the nature of the incident or when it occurred, but it said it could also slow full-year 2026 underlying earnings per share growth to the low single digits. That suggests the financial impact may extend beyond the immediate quarter, as the company deals with remediation costs and potential lost business.
Investors have seen similar situations before. For example, AIG beat profit forecasts despite bigger storm losses, showing that one-off events can be absorbed, but they still weigh on results. In Ahold's case, the cyber incident is an operational setback that could take time to fully resolve.
What it means for investors
For everyday investors, the key takeaway is that Ahold Delhaize's underlying business appears solid, but the cyber incident introduces uncertainty. The company's decision to cut its outlook is a caution flag, even if the impact is relatively contained.
When a company beats quarterly forecasts but lowers its forward guidance, the market often focuses on the guidance. That is because investors care more about where a company is going than where it has been. A slower growth trajectory for 2026 could mean lower earnings than previously expected, which may pressure the stock price.
It is also worth noting that cybersecurity risks are a growing concern for all companies, not just retailers. A single incident can disrupt operations, damage customer trust, and lead to regulatory fines or lawsuits. For investors, this is a reminder to consider how well a company manages such risks.
That said, Ahold Delhaize is a large, diversified grocer with strong market positions in multiple countries. Companies in this position often have the resources to recover from cyber incidents, though the process can be costly and time-consuming.
Looking ahead, investors will likely watch for more details on the cyber incident, including when it occurred, what systems were affected, and how quickly the company can restore normal operations. They will also monitor whether the impact on 2026 earnings is temporary or a sign of deeper issues.
In the broader context, the news fits a pattern of companies facing unexpected shocks. For instance, LATAM cut its profit outlook as fuel costs outpaced fare hikes, and BMW cut its 2026 auto profit outlook again due to restructuring costs. These examples show that even well-run companies can hit bumps in the road.
For now, Ahold Delhaize's third-quarter beat offers some reassurance, but the cyber incident and the lowered outlook are the main story. Investors should weigh the company's long-term strengths against the near-term uncertainty.
