Cyberattacks on Supermarket Fridges Sweep Across Europe

A wave of cyberattacks targeted supermarket refrigerators and freezers across at least seven European countries, forcing retailers to discard large amounts of spoiled food. The coordinated incidents on Monday affected grocery chains in Sweden, Belgium, Luxembourg, France, the Netherlands, Estonia, and Finland, echoing a similar large-scale attack that struck hundreds of French supermarkets in October.

Major European grocery groups reported disruptions as unauthorized users remotely manipulated cooling systems. Affected companies include Ahold Delhaize, which had dozens of stores impacted in Belgium and Luxembourg; Swedish grocers ICA and Coop; French retailer Carrefour; and Irish grocery chain SuperValu, where 13 stores experienced failures. Furniture retailer IKEA also confirmed that refrigeration equipment at its Mons store in Belgium was compromised.

Investigators noted that the attacks caused temperatures in some refrigeration units to surge as high as 50 degrees Celsius, or 122 degrees Fahrenheit. Stephan Moelans, chief executive of Sabcobel, a Belgian company that operates refrigeration systems for Delhaize, explained that evaporators were switched to defrost mode. He stated that the affected units required physical modifications rather than simple software updates to secure them against the exploited vulnerabilities.

European authorities have responded with high concern, convening emergency meetings through the European Commission, the EU interinstitutional Task Force, ENISA, and Europol. European Commissioner for Agriculture and Food Christophe Hansen described the incident as a deliberate attempt to disrupt the food supply chain and undermine consumer confidence, emphasizing that the weaponization of food has become a reality.

No group or bad actor has claimed responsibility for the attacks, leaving investigators uncertain whether the perpetrators are criminal hackers or state-backed actors seeking to cause geopolitical disruption. Fredrik Blix, a strategic cybersecurity advisor, noted that the hacks themselves were relatively unsophisticated, exploiting control units directly connected to the public internet using default logins and unpatched legacy hardware.

Cybersecurity experts have drawn broader warnings from the supermarket incidents regarding critical infrastructure. Richard Horne, head of Britain's National Cyber Security Centre, stated that organizations across various sectors have relied on cheap technology and tolerated long-standing vulnerabilities for decades. While no British stores were impacted in the latest wave, officials warn that connected physical devices globally face escalating risks as attackers increasingly target vulnerable industrial control systems.