Ahold Delhaize and Hertz Face Major Data Breaches Amid Rising Cyber Threats

On April 21, 2025, Ahold Delhaize, a prominent retail giant, fell victim to a data theft incident linked to the notorious ransomware group INC Ransom. This attack compromised various services, including e-commerce and pharmacy operations across the U.S. The evolving tactics employed by INC Ransom underscore the urgent need for enhanced security measures in the retail sector. Meanwhile, Hertz experienced a significant data breach due to a zero-day vulnerability in a Cleo file share tool, resulting in the exposure of sensitive customer data, including names, birth dates, and credit card information. These incidents reflect an alarming trend in cyber threats, where attackers are increasingly exploiting vulnerabilities in critical systems.

Also In Security Today

Google Phishing Campaign: Google has confirmed a sophisticated phishing attack targeting Gmail users, utilizing DKIM and OAuth protocols to trick users into granting access to malicious applications. This breach emphasizes the need for robust user education and authentication measures. source

CISA Vulnerability Bulletins: The Cybersecurity and Infrastructure Security Agency (CISA) released its weekly vulnerability summary, highlighting critical vulnerabilities, including one in the Adept language framework that could allow for remote code execution. Organizations are urged to patch affected systems promptly. source

Heightened Threat Landscape: As cyber threats continue to evolve, organizations are reminded to stay vigilant and proactive in their cybersecurity measures. The recent spate of breaches indicates a shift in attacker tactics, necessitating a reassessment of security strategies.

Analyst's Take

The recent breaches at Ahold Delhaize and Hertz serve as stark reminders of the increasing sophistication of cyber threats. Organizations must prioritize patch management and invest in advanced threat detection systems. The exploitation of a zero-day vulnerability at Hertz exemplifies the risks associated with third-party tools. Additionally, the phishing attack on Gmail users highlights the need for users to be educated about security best practices. As attackers refine their methods, defenders must adopt a proactive stance, continuously assessing and updating their security frameworks to mitigate risks effectively.