Cyberattack on Alcampo: how it affected the operation and the measures to return to normality

In the early morning of Sunday 25 to Monday 26 August 2025, the chain of hypermarkets and supermarkets Alcampo, owned by the French group Auchan, suffered a cyberattack that partially impacted its internal systems, especially the ordering and supply processes, causing a momentary shortage of products in some stores. Although no evidence of a leak of customer or employee personal data has been made public, the incident put the company and its cybersecurity teams on alert.

‍

Details of the attack and its operational impact

• The main objective of the attack was store ordering systems and logistics links, which caused delays and occasional shortages in some establishments distributed throughout Spain.
• Alcampo quickly activated a analog contingency plan to keep operations relatively normal, prioritizing the continuity of customer service and purchasing processes.
• The application of promotional brochures and the creation of periodic offers were affected to a lesser extent, although the company denied a direct impact on these services.
• The firm is working closely with cybersecurity experts and has filed a corresponding complaint with law enforcement authorities to investigate the origin and extent of the attack.

‍

Context and repercussions

• Alcampo is one of the leading companies in the food retail sector in Spain, with 79 hypermarkets, more than 400 supermarkets and a turnover of close to 4.9 billion euros in 2023.
• Cyberattacks on distribution chains are especially sensitive, due to the large amount of commercial and personal data they handle, and the importance of keeping logistics systems and sales channels active.
• The increase in incidents of this type in Spain in 2025 reflects the need to strengthen the retail sector's defenses against growing threats.
• Experts point out that rapid response and recovery capacity is key to minimizing operational and reputational damage.

‍

Apolo Cybersecurity recommendations for the retail sector

• Strengthen the security of logistics and order management systems with access control and constant monitoring.
• Perform regular backups and review contingency plans to activate them without delay.
• Train teams in detecting internal and external attacks, paying attention to social engineering.
• Collaborate with authorities and experts for the investigation and mitigation of incidents.
• Invest in secure infrastructures and technologies that allow continuity in hybrid digital and analog environments.

‍

🛡️ Request your free consultancy with Apolo Cybersecurity and strengthen your digital defense today

‍

The cyberattack on Alcampo in August 2025 highlights the growing challenge of protecting the supply chain and digital systems in the retail sector. The company's rapid reaction has prevented major impacts, although the episode recalls the importance of prevention, detection and agile management of incidents.

Do you want to know if your company is prepared to face cyberattacks like this?

‍