The shelf is software
In short
AAnomaly
In October 2026, Albert Heijn's parent company Ahold Delhaize was hit by a cyberattack and switched off its own systems. Albert Heijn could not fill shelves, deliver online orders or show the right prices 1. The problem was not a lack of food. It was the system. Expected cost: €200 to 250 million in sales 1, 2.
RReframe
We think a supermarket sells food. It is a system that also sells food. The shelf has become software, and nobody saw it until it stopped. It may be true for your company too, even if you say "we don't really do IT."
CCreate: questions for your team
- What in our ordinary work stops when the screen stops?
- Could we work one day without it?
- Who knows how?
Rethink the premise.
Go deeper The full piece, with all sources
AAnomaly
In October 2026, Ahold Delhaize was hit by a cyberattack. The company switched off several of its own systems to limit the damage 1, 3. In the Netherlands, the websites, apps and loyalty cards of Albert Heijn, Etos and Gall & Gall stopped. But so did things nobody thinks of as IT. Albert Heijn could not restock shelves, could not deliver online orders and could not show the right prices on its electronic price tags 1. Distribution centres stood still 3.
The company expects €200 to 250 million less in sales and €75 to 100 million less profit in the fourth quarter 1, 2. The CEO: "most of the disruption was contained within two weeks, work continues to fully restore our normal operations." 1 There is no public post-mortem yet, so we say nothing here about cause or attacker.
RReframe
The news is about the attacker. The anomaly is somewhere else. The cause was not a lack of food. What stopped was the system that moves food to the shelf and puts a price on it 1.
We still think of a supermarket as a place that sells food. It has become a system that also sells food. The shelf is software. Nobody sees that on a normal day, because on a normal day it works. And it is probably not only supermarkets. My own observation: many organisations that say "we don't really do IT" run their ordinary, physical work on systems they never think about. How many, nobody has measured.
CCreate: questions for your team
- What in our ordinary work stops when the screen stops?
- Could we work one day without it? What would we use instead?
- Who in our team still knows how?
Rethink the premise.
Sources
- Ahold Delhaize cyberattack to cost up to €250 million in lost sales (Q3 2026 results)Strong · based on company statement
- Ahold Delhaize posts resilient Q3, cuts 2026 outlook after cyber incidentStrong
- Aanval kost Ahold Delhaize 250 miljoenStrong
Want to work on this with your team? See our products →