Hannaford Data Breach
Hannaford Data Breach
PO Box 589
June 26, 2025
Claysburg, PA 16625-0589
N5640-L01-0000001 P001 T00001 ********SCH 5-DIGIT 12345
SAMPLE A SAMPLE - L01 A - HR
APT ABC
123 ANY STREET
ANYTOWN, ST 12345-6789
qppssppprspppqpqsprssqrrqqprsrppppsrsqrqqsqrsrpqsqqppssppsssqrsqp
What Happened?
We detected a cybersecurity issue involving unauthorized access to some of our internal U.S. business systems
on November 6, 2024. We immediately launched an investigation with the assistance of leading external
cybersecurity experts, coordinated with U.S. federal law enforcement and began taking steps to contain the issue.
Based on our investigation, we identified that an unauthorized third party obtained certain files from one of our
internal U.S. file repositories between November 5 and 6, 2024.
These investigations are complex and time intensive, and we have been working diligently to review the impacted
files to understand their nature and scope, including to determine if, and to what extent, the information of
individuals was affected. Based on this review, we recently learned that some of these files may have included
internal employment records containing personal information about you that we obtained in the course of
providing services for certain current and former Ahold Delhaize USA companies.
Given the nature of the file repository, the files that may have been affected contained different types of personal
information such as name, contact information (for example, postal and email address and telephone number),
date of birth, government-issued identification numbers (for example, Social Security, passport and driver’s
license numbers), financial account information (for example, bank account number), health information (for
example, workers’ compensation information and medical information contained in employment records), and
employment-related information. The types of impacted information vary by affected individual.
0000001
ENGAGE# N5640-L01
What Are We Doing to Address the Issue?
Upon detection last November, we began taking steps to assess and contain the issue, including working with
external cybersecurity experts to investigate and secure the affected systems. We take this issue extremely
seriously and will continue to take actions to further protect our systems.
We are informing you about this issue so you can take steps to help protect yourself. We have arranged to offer
complimentary credit monitoring and identity protection services to you for two years. Additionally, you are
entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting
agencies. To order your free credit report, visit www.annualcreditreport.com or call toll-free at 1-877-322-8228.
We encourage you to remain vigilant by reviewing your account statements and monitoring your free credit
reports.
The attached Reference Guide provides information on how to register for these services and additional
information on ways to further protect your personal information.
We regret any inconvenience this issue may cause for you. For additional information about the issue, please
visit www.adusaservices.com. If you have any further questions about this issue, please call 1-833-931-3792,
Monday through Friday from 8 am to 8 pm Central Time (excluding major U.S. holidays). Please reference
engagement number ENGAGE# when calling.
Sincerely,
Dyana Tull
U.S. Privacy Officer
ENGAGE# N5640-L01
Reference Guide
Register for Experian IdentityWorks Services. We have arranged with Experian to offer complimentary
identity protection and credit monitoring services to you for two years. These Experian IdentityWorks services
include:
• Experian Credit Report at Sign-Up: See what information is associated with your credit file. Daily
credit reports are available for online members only*.
• Credit Monitoring: Monitors Experian file for indicators of fraud.
• Internet Surveillance: This technology searches the web, chat rooms and bulletin boards to identify
trading or selling of your personal information on the Dark Web.
• Identity Restoration: Identity Restoration agents are available to help you address credit and non-credit
related fraud.
• Experian IdentityWorks ExtendCARETM: Continue to receive Identity Restoration support after your
Experian IdentityWorks membership has expired.
• $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized electronic
fund transfers.
• Enroll by: September 30, 2025 by 11:59 pm UTC (Your code will not work after this date.)
• Visit the Experian IdentityWorks website to enroll: https://www.experianidworks.com/plus
• Provide your activation code: ABCDEFGHI
If you have questions about the services, need assistance with identity restoration, or would like an alternative to
enrolling in Experian IdentityWorks online, please contact Experian’s customer care team by September 30,
2025 at 1-833-931-3792 Monday – Friday, 8 am – 8 pm Central Time (excluding major U.S. holidays). Please
be prepared to provide engagement number ENGAGE# as proof of eligibility for the identity restoration
services offered by Experian.
* Offline members will be eligible to call for additional reports quarterly after enrolling.
** The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant
company. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all
jurisdictions.
Order Your Free Credit Report. You are entitled under U.S. law to one free credit report annually from each
of the three nationwide consumer reporting agencies. To order your free credit report, visit
www.annualcreditreport.com, call toll-free at 1-877-322-8228, or complete the Annual Credit Report Request
Form on the U.S. Federal Trade Commission’s (“FTC’s”) website at www.consumer.ftc.gov and mail it to Annual
Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281.
When you receive your credit report, review it carefully. Look for accounts you did not open. Look in the
“inquiries” section for names of creditors from whom you have not requested credit. Some companies bill under
names other than their store or commercial names. The consumer reporting agency will be able to tell you when
that is the case. Look in the “personal information” section for any inaccuracies in your information (such as home
address and Social Security number). If you see anything you do not understand, call the consumer reporting
agency at the telephone number on the report. Errors in this information may be a warning sign of possible identity
theft. You should notify the consumer reporting agencies of any inaccuracies in your report, whether due to error
0000001
ENGAGE# N5640-L01
or fraud, as soon as possible so the information can be investigated and, if found to be in error, corrected. If there
are accounts or charges you did not authorize, immediately notify the appropriate consumer reporting agency by
telephone and in writing. Consumer reporting agency staff will review your report with you. If the information
cannot be explained, then you will need to call the creditors involved for an explanation. Information that cannot
be explained also should be reported to your local police or sheriff’s office because it may signal criminal activity.
Report Incidents. We encourage you to remain vigilant for incidents of fraud and identity theft by reviewing
your financial account statements as well as monitoring your free credit reports. If you detect any unauthorized
transactions in a financial account, promptly notify the relevant financial institution. If you detect any incident of
identity theft or fraud, promptly report the incident to law enforcement, your state Attorney General or the FTC.
If you believe your identity has been stolen, the FTC recommends that you take these steps:
• Close the accounts that you have confirmed or believe have been tampered with or opened fraudulently.
For streamlined checklists and sample letters to help guide you through the recovery process, please visit
www.identitytheft.gov.
• File a local police report. Obtain a copy of the police report and submit it to your creditors and any others
that may require proof of the identity theft crime.
You can contact the FTC to learn more about how to protect yourself from becoming a victim of identity theft and
how to repair identity theft:
Consider Placing a Fraud Alert on Your Credit File. To protect yourself from possible identity theft, consider
placing a fraud alert on your credit file. A fraud alert helps protect you against the possibility of an identity thief
opening new credit accounts in your name. When a merchant checks the credit history of someone applying for
credit, the merchant gets a notice that the applicant may be the victim of identity theft. The alert notifies the
merchant to take steps to verify the identity of the applicant. You can place a fraud alert on your credit report by
calling any one of the toll-free numbers provided below. You will reach an automated telephone system that allows
you to flag your file with a fraud alert at all three consumer reporting agencies. For more information on fraud
alerts, you also may contact the FTC, as described above.
Consider Placing a Security Freeze on Your Credit File. You may wish to place a “security freeze” (also known
as a “credit freeze”) on your credit file. A security freeze is designed to prevent potential creditors from accessing
your credit file at the consumer reporting agencies without your consent. Unlike a fraud alert, you must place a
security freeze on your credit file at each consumer reporting agency individually. There is no charge to place or
lift a security freeze. For more information on security freezes, you may contact the three nationwide consumer
ENGAGE# N5640-L01
reporting agencies or the FTC as described above. As the instructions for establishing a security freeze differ from
state to state, please contact the three nationwide consumer reporting agencies to find out more information.
The consumer reporting agencies may require proper identification prior to honoring your request. For example,
you may be asked to provide:
• Your full name with middle initial and generation (such as Jr., Sr., II, III)
• Your Social Security number
• Your date of birth
• Addresses where you have lived over the past five years
• A legible copy of a government-issued identification card (such as a state driver’s license or military ID
card)
• Proof of your current residential address (such as a current utility bill or account statement)
For Iowa Residents. You may contact law enforcement or the Iowa Attorney General’s Office to report suspected
incidents of identity theft. This office can be reached at:
For Maryland Residents. You can obtain information from the Maryland Office of the Attorney General about
steps you can take to avoid identity theft. You can contact the Maryland Office of the Attorney General at:
For Massachusetts Residents. You have the right to obtain a police report and request a security freeze as
described above. The consumer reporting agencies may require that you provide certain personal information
(such as your name, Social Security number, date of birth and address) and proper identification (such as a copy
of a government-issued ID card and a bill or statement) prior to honoring your request to place a security freeze
on your account.
For New Mexico Residents. You have rights under the federal Fair Credit Reporting Act (“FCRA”). These
include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and
to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For
more information about the FCRA, please visit https://files.consumerfinance.gov/f/201504_cfpb_summary_your-
rights-under-fcra.pdf or www.ftc.gov.
For New York Residents. You can obtain information from the New York State Office of the Attorney General
about how to protect yourself from identity theft and your privacy online. You can contact the New York State
Office of the Attorney General at:
ENGAGE# N5640-L01
1-800-771-7755 (toll-free)
1-800-788-9898 (TDD/TTY toll-free line)
https://ag.ny.gov/
For North Carolina Residents. You can obtain information from the North Carolina Attorney General’s Office
about preventing identity theft. You can contact the North Carolina Attorney General at:
For Oregon Residents. We encourage you to report suspected identity theft to the Oregon Attorney General at:
For Rhode Island Residents. You may obtain information about preventing and avoiding identity theft from the
Rhode Island Office of the Attorney General at:
You have the right to obtain a police report and request a security freeze as described above. The consumer
reporting agencies may require that you provide certain personal information (such as your name, Social Security
number, date of birth, and address) and proper identification (such as a copy of a government-issued ID card and
a bill or statement) prior to honoring your request for a security freeze on your account.
For Washington, D.C. Residents. You may obtain information about preventing and avoiding identity theft from
the Office of the Attorney General for the District of Columbia at:
ENGAGE# N5640-L01