Cyberattack on Supermarket Refrigerators Hits Seven European Countries

Dozens of supermarkets and retail stores across seven European countries experienced coordinated cyberattacks affecting their refrigeration and freezing systems between Sunday night and Monday morning. The security breaches struck around 40 Delhaize supermarkets in Belgium and Luxembourg, alongside locations in Sweden, Ireland, the Netherlands, Estonia, and Finland. Hackers remotely switched the evaporators of the cooling units into defrost mode, causing internal temperatures to surge as high as 50 degrees Celsius (122 degrees Fahrenheit) or more in certain stores and resulting in significant food spoilage.

The incident closely mirrored a similar wave of attacks in early October that targeted hundreds of grocery stores across France. Stephan Moelans, CEO of Sabcobel, a Belgian refrigeration manufacturing and servicing company, stated that the method used in the latest wave appeared identical to the French incident. He explained that technicians spent the night disconnecting affected units from networks and noted that securing the infrastructure requires physical modifications rather than simple software updates because most modern supermarkets rely on internet-connected maintenance systems.

Major European retail groups confirmed that their operations had been compromised. In Sweden, budget furniture giant IKEA reported that a store in the western city of Mons was affected, while Swedish grocery chains ICA and Coop confirmed that a limited number of their branches suffered tampering. In Belgium, Carrefour reported that 15 of its stores were hit, and the Colruyt Group noted that five Spar franchise locations experienced refrigeration tampering. Meanwhile, in Ireland, 13 SuperValu stores were forced to remove chilled and frozen items from sale as a precautionary measure.

No individual or group has publicly claimed responsibility for the breaches. European authorities and cybersecurity experts have expressed deep concern over the vulnerability of critical infrastructure to digital tampering. EU Commissioner for Agriculture Christophe Hansen described the events as a deliberate attempt to disrupt the food supply chain and undermine consumer confidence. Some cybersecurity researchers suggested that the absence of financial extortion demands points toward deliberate sabotage rather than traditional ransomware schemes.

Katrien Eggers, a spokesperson for Belgium's Centre for Cybersecurity, warned that the widespread availability of artificial intelligence tools makes sophisticated cyberattacks increasingly accessible to malicious actors. Investigators noted that at least some of the compromised refrigeration equipment utilized technology manufactured by the Danish engineering firm Danfoss, which was also linked to the units targeted in the French attacks last month. Danfoss representatives stated that they have been working closely with affected clients to apply firmware updates and strengthen network security measures.

Government bodies across Europe have mobilized in response to the growing threat. The United Kingdom's National Cyber Security Centre announced that it was collaborating with international partners and retail industry leaders to understand the scope of the incident and issue protective guidance to domestic businesses, even though no British supermarkets have reported hacks thus far. National cyber defense agencies in Belgium, Sweden, and other affected nations continue to monitor the situation closely as store managers assess financial losses and work to restore normal operations.