Cyberattack Targets Supermarket Refrigeration Systems Across Europe

A wave of sophisticated cyberattacks struck the refrigeration and freezing systems of numerous supermarkets and commercial businesses across at least seven European countries, causing severe operational disruptions and the loss of large quantities of perishable food. Major retail chains in nations including Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland reported abnormal temperature fluctuations in their storage units following unauthorized digital intrusions into their operational control networks.

The technical disruptions began around midnight, specifically targeting the programmable logic controllers that manage evaporation and thermal maintenance cycles in commercial cooling equipment. According to industrial service firms, remote attackers manipulated operational programming to force evaporators into a continuous defrost mode. This drastic shift caused internal temperatures to spike significantly, with certain store units reaching as high as 50 degrees Celsius overnight.

In Sweden, major grocery operators ICA and Coop experienced significant disruptions at a limited number of store locations. Rickard Nilsson, manager of an ICA store in Sjöbo, stated that hackers remotely altered temperatures in the refrigeration units. "We cannot regulate the temperature, we cannot change it. Hot air is entering the freezers. Everything is ruined," Nilsson noted. The unexpected temperature increases forced several affected stores to close temporarily while maintenance crews worked to restore normal operating parameters.

Belling and Luxembourg operations within the Ahold Delhaize and Colruyt groups also faced heavy operational hurdles. Stephan Moelans, chief executive of the Belgian industrial refrigeration firm Sabcobel, explained that his team spent the night and morning disconnecting impacted units from the network. "I was awakened by the alarms starting to appear on my phone around three in the morning," Moelans said, describing how compressors had shut down and refrigeration units began blowing hot air. Several Belgian locations had to discard massive amounts of merchandise or deploy mobile refrigerated trucks to preserve what they could.

Other European regions reported similar incidents involving smaller local merchants and specialized stores. In the Netherlands, refrigeration provider Danfoss confirmed that at least 17 businesses, primarily butcher shops and small neighborhood stores, were targeted by attackers exploiting default passwords and poorly secured network connections. Meanwhile, retail entities in Estonia and Finland noted comparable system failures and temperature spikes within their store networks.

National cybersecurity agencies across the affected countries have launched formal investigations to determine the full scope of the sabotage. John Billow, director of Sweden's National Cybersecurity Center, pointed out that numerous operational technology devices had been identified as exposed in recent weeks, underscoring the urgent need for timely software updates and security patches. Authorities have not yet made any formal attribution regarding who is behind the coordinated incidents, though security experts suggest the lack of financial ransom demands points directly toward deliberate physical sabotage.