Cyberattacks Target Supermarket Refrigeration Systems Across Europe

A wave of suspected cyberattacks targeted supermarket refrigeration systems across multiple European nations, leading to dangerous temperature increases in commercial freezers and causing significant food spoilage. The incidents occurred early Monday morning and affected retail establishments in Sweden, Belgium, Luxembourg, Ireland, and Estonia, while potential issues were also reported in the Netherlands and Finland.

The disruption closely mirrors an episode from October in France, where hundreds of grocery stores suffered remote tampering with their refrigeration controls. In the latest incidents, hackers reportedly accessed digital control systems to alter internal temperatures. At a supermarket in Sjöbo, Sweden, and another location in Estonia, refrigeration units reached up to 50 degrees Celsius, forcing staff to discard compromised food products to ensure consumer safety.

Major retail chains reported varying degrees of impact. In Sweden, the ICA and Coop chains confirmed operational disruptions. Coop reported that six of its stores were affected, noting that the impacted locations were connected to older 4G mobile networks rather than updated 5G systems, leaving them more vulnerable to hackers. The Swedish National Cybersecurity Center opened an investigation into the matter.

In Belgium and Luxembourg, the Ahold Delhaize group confirmed that an IT incident affected the refrigeration systems of dozens of supermarkets. Additional problems emerged at Carrefour, Spar, and Colruyt locations in Belgium, alongside an incident at an IKEA store in Mons. Carrefour confirmed that 15 of its Belgian stores experienced issues, though management described the overall impact as limited. The Belgian federal prosecutor's office launched an investigation, though authorities have not yet officially classified the event as a cyberattack.

In Ireland, the Musgrave Group stated that 13 SuperValu stores experienced problems tied to a specific model of refrigeration equipment. As a precautionary measure, the affected locations removed all fresh and frozen goods from sale. Meanwhile, Estonian public broadcaster ERR reported that a Selver supermarket in the country was targeted, though quick intervention prevented massive food losses.

Industry experts pointed to potential vulnerabilities involving external temperature control systems. Helena Johansson, a spokesperson for Sweden's ICA, noted that affected stores relied on an external cooling control system supplied by the Danish manufacturer Danfoss, which was also linked to the October attacks in France. Jann Mutso, director of Estonian refrigeration manufacturer Kitman Coldtech, confirmed that the targeted units were older Danfoss models.

European Union officials strongly condemned the coordinated disruptions. Christophe Hansen, the European Commissioner for Agriculture, described the events as a deliberate attempt to disrupt the food supply chain and undermine consumer trust. While emphasizing that overall food security is not currently under threat, Hansen warned that the economic impact and food waste resulting from the incidents are profound and require serious attention.