SEVN-X’s Matt Barnett Returns to NBC10 to Explain Grocery Cyberattack Risks

SEVN-X CEO Matt Barnett is back on NBC10 Philadelphia, helping shoppers understand what a grocery cyberattack can mean for their accounts, rewards points, and personal information.

In NBC10 Responds’ “Cyberattack disrupting 3 grocery stores”, Barnett explains why backup and recovery matter—and why early findings about data exposure can change as investigators learn more.

The quick answer: A grocery app outage does not, by itself, prove that customer data was stolen or rewards points were lost. Recovery may restore account information, while investigators separately determine whether data was accessed or taken. Customers should check official updates and be cautious of unsolicited messages about refunds or account recovery.

This article covers the October 2026 incident. Company statements below are dated; service availability and investigation findings may change.

What happened to GIANT, Food Lion, and Stop & Shop?

The NBC10 segment reports disruption to websites and apps for GIANT, Food Lion, and Stop & Shop, including online ordering and access to digital savings. Their parent company is Ahold Delhaize.

In its October 13, 2026 update, Ahold Delhaize said it had taken some systems offline as a precaution and was beginning a controlled relaunch of certain systems. Stores remained open, and effects varied by brand.

What Matt Barnett told NBC10 about account recovery

For shoppers who cannot see their rewards balance, an unavailable app can feel like lost money. Barnett explained that restoration commonly includes recovering account details, points, and customer profiles from backups. He also acknowledged that a cyber event can involve some data loss.

That distinction matters: an inaccessible balance is not proof that the underlying record has disappeared. Recovery depends on the affected systems, available backups, and the integrity of the restored data. It is not a guarantee that every account or transaction will be recovered.

For businesses, the practical lesson is to test the recovery customers actually depend on. Restoring a server is one step. Confirming that customers can sign in, see the correct balances, and complete orders is the outcome that matters.

Was customer information stolen?

Ahold Delhaize said on October 13, 2026 that it had no evidence at that moment that customer or associate data had been taken. The company also said its investigation was ongoing. That is a dated investigation finding, rather than a final assurance.

Barnett explained in the segment that investigators can discover relevant information in unexpected places. A system initially believed to be unaffected may not tell the whole story if another affected system also holds that data.

For an organization responding to an incident, this is a reason to map where information lives and review evidence across connected systems. Customer records may also appear in exports, support workflows, or reporting tools. Those are general examples, not findings about this incident.

What should shoppers do during a grocery app outage?

Start with the retailer’s official communications. The NBC10 report described refunds for unfulfilled online orders, alternative delivery services, and asking store employees about digital coupons. Those options were reported during the segment; customers should verify current arrangements with their specific store.

• Verify messages independently. Open the retailer’s known app or type its website address yourself instead of following an unexpected refund or recovery link.
• Keep order records. Save receipts, order confirmations, and refund notices so you can resolve discrepancies with the retailer.
• Protect your login. Use a unique password and enable multifactor authentication where available. Never share verification codes with someone who contacts you unexpectedly.
• Review activity when access returns. Check account details, recent orders, and rewards balances, and report anything unfamiliar through an official channel.

The segment also warns about unsolicited texts and calls requesting personal or banking information. An outage gives scammers a believable reason to contact customers, so take a moment to verify the request before responding.

What business leaders can learn from the disruption

A customer-facing outage puts recovery, communications, and trust under pressure at the same time. SEVN-X recommends using that scenario to ask practical questions before an incident happens:

• Can we restore a complete customer journey? Test login, ordering, account data, and dependent services together, with clear recovery priorities.
• Do we know every place sensitive information is stored? Include integrations, exports, and operational copies in the review.
• Can we explain what is known? Assign owners for updates that distinguish verified facts, open questions, and available workarounds.
• Can staff recognize incident-related impersonation? Rehearse how support teams verify refund and account recovery requests when normal systems are unavailable.

These are SEVN-X preparedness recommendations. They do not describe the cause of the Ahold Delhaize incident or assert that a particular safeguard was missing.

Frequently asked questions about the grocery cyberattack

Does a grocery app outage mean my personal data was stolen?

No. An outage alone does not establish data theft. In its October 13, 2026 update, Ahold Delhaize reported no evidence at that moment that customer or associate data had been taken, while its investigation continued.

Can rewards points be recovered after a cyberattack?

They may be. Matt Barnett explained on NBC10 that recovery commonly includes account details and loyalty points. The outcome depends on the affected systems and recoverable data; restoration is not guaranteed.

Can I still shop if the grocery app is down?

Ahold Delhaize said on October 13 that its stores remained open. Online ordering, delivery, and coupon options can differ by brand and location, so check directly with your retailer for current availability.

How can a business prepare for a similar disruption?

Test recovery of essential customer services, map where sensitive data is stored, assign incident communication responsibilities, and rehearse customer support procedures for outages and impersonation attempts.

Watch Matt’s NBC10 appearance

Watch the full NBC10 Responds segment: “Cyberattack disrupting 3 grocery stores.”

Dealing with an active incident? Connect with our incident response team.

Editorial maintenance — October 16, 2026: Presentation and navigation updated; original wording retained. Original authorship and analysis retained.