Shares surged 7.1% to $34.29 after the Dutch grocery giant posted Q3 results that topped Wall Street forecasts on nearly every line, then sweetened the picture with a promise to hand cash back to shareholders. The question investors face now: does a strong quarter and a generous buyback outweigh the growing cost of repeated cyberattacks?
• The Numbers Were Better Than Expected, Especially in the U.S.
Third-quarter net sales rose 1.9% to €23.1 billion, while diluted underlying earnings per share increased 1% to €0.69.
U.S. comparable store sales grew 0.5% — ahead of the 0.3% analyst estimate — while U.S. margins expanded 30 basis points to 4.3%, above the 4.2% consensus.
The company said it gained market share across most of its U.S. brands and delivered positive volumes even as the broader U.S. grocery market contracted. In a stagnant grocery market, any share gain is meaningful because it signals pricing discipline without losing shoppers.
• A €1 Billion Buyback Sends a Confidence Signal
The company maintained its commitment to shareholder returns despite the cybersecurity incident's impact on guidance, confirming plans to launch a €1 billion share buyback program at the beginning of 2027 — essentially telling the market it expects to generate enough cash to both invest and reward shareholders. Ahold Delhaize also repurchased €844 million of shares under its 2026 program , meaning total buybacks across the two years could approach €2 billion. For a stock trading near a trailing price-to-earnings ratio of roughly 12.3 — near its two-year low — that kind of capital return matters: fewer shares outstanding boost per-share earnings even when overall profit barely grows.
• A Second Cyberattack in Two Years Is Now a Material Cost
The October disruption is expected to reduce fourth-quarter net sales by €200–€250 million and operating income by €75–€100 million.
Management cut EPS growth guidance from mid-to-high single digits to low single digits and reduced free cash flow expectations to approximately €2.1 billion from a prior floor of €2.3 billion.
Ahold Delhaize had already undergone a November 2024 ransomware attack in its U.S. network , making this the second major breach in two years — a pattern that raises questions about ongoing remediation spending and reputational risk.
• Online Growth Remains the Bright Spot, but It Cuts Both Ways
U.S. online sales climbed 14.2%, the tenth straight quarter of double-digit growth. That momentum is critical for long-term relevance against digital-native competitors, but it also means the company's fastest-growing channel is precisely the one most vulnerable to cyber disruptions.