Hackers remotely spiked supermarket refrigerator and freezer temperatures up to 55°C across seven European countries on November 2, forcing retailers to discard massive quantities of spoiled food in a coordinated digital assault echoing an earlier October breach in France.
Supermarket Refrigeration Systems Hijacked Across Seven European Nations
A fresh wave of cyberattacks struck commercial grocery chains early Monday morning, targeting operational technology networks and sending cold-storage temperatures soaring to extreme highs. According to international reports collected by United24 Media, the disruption hit major retail groups across Belgium, Sweden, Ireland, Luxembourg, Estonia, Finland, and the Netherlands.
In Stockholm, an ICA Baronen store manager arrived to work at 5:30 am to find puddles of water and display units pushed to 55°C through remote intrusion, as detailed by The Register. Engla Ingwall, sales manager at an ICA franchise store in the Swedish capital, told Reuters during a Monday visit that the attack struck at 2 a.m. local time.
There has been a cyberattack and all our freezers reached 50 degrees [Celsius]. Everything is destroyed.
Engla Ingwall, sales manager at an ICA franchise store in Stockholm
Retailers across the continent scrambled to disconnect vulnerable machinery. Stephan Moelans, CEO of Sabcobel, the Belgian refrigeration firm operating Delhaize’s systems, stated to the Belga news agency that his teams spent the night and morning working continuously to disconnect affected units from the network after discovering attackers had forced evaporators into defrost mode.
Retail Groups Count the Cost as Thousands of Pounds of Food Spoils
The financial toll mounted quickly as grocers emptied chilled and frozen aisles. In Belgium, a Delhaize franchise branch in Hoeilaart told the news website Het Laatste Nieuws it had lost €100,000 (equivalent to £83,500) in ruined inventory alone, excluding additional revenue lost from closing doors to manage the crisis. Diego Louwers, a Proxy Delhaize store manager in Overijse near Brussels, called the consequences catastrophic after telling RTL Info that his store was forced to throw away the entirety of its fresh and frozen merchandise.
In Ireland, third-largest supermarket operator Musgrave confirmed via a spokesperson that refrigeration units at 13 SuperValu stores experienced temperature spikes due to a targeted vulnerability affecting a specific equipment model. By Tuesday, according to the Irish Independent, Musgrave announced that all affected branches had restored normal operations, with replenishment well underway following immediate automated alerts and proactive isolation.
Further operational impacts were logged across multiple brands:
- Carrefour: Confirmed that 15 of its 700 stores in Belgium were impacted, though all locations remained open through immediate countermeasures.
- Les Mousquetaires: Reported roughly 150 Intermarché stores affected in France, requiring the complete disposal of perishable food across those sites.
- IKEA: Acknowledged that refrigeration systems at its store in Mons, Belgium, suffered disruptions, with a spokesperson telling Reuters that management could not rule out additional locations being affected.
- Colruyt Group: Stated to Reuters that five franchised Spar stores in Belgium faced similar attacks on their fridge systems.
Security Experts Warn of Grey-Zone Sabotage and Outdated Infrastructure
Investigators and cybersecurity analysts noted the complete absence of financial demands or ransomware notes in the Monday intrusions. Rafe Pilling, senior director for threat intelligence at the cybersecurity company Sophos, outlined the primary motivations in assessments published by The Guardian.
The two most plausible attribution scenarios for me are some kind of state-based signalling and demonstration of capability or some kind of lone-wolf hacker that is conducting these attacks for their own personal reasons.
Rafe Pilling, senior director for threat intelligence at Sophos
The European Commission condemned the operation, stating that the incident marked a deliberate attempt to disrupt the continental food supply chain and undermine consumer confidence. In the UK, which escaped damage in the Monday wave, the National Cyber Security Centre stated it was working with international partners and industry to fully understand the incident, while the British Retail Consortium liaised directly to audit refrigeration security.
Security researchers pointed to operational technology blind spots as the root vulnerability. Because commercial cooling units, electronic shelf labels, and digital advertising screens run on specialized firmware, they are frequently left unpatched for years because taking heavy machinery offline during business hours presents severe operational hurdles for food retailers, according to Nick Jackson, director of cyber-operations at Bitdefender. Katrien Eggers, spokesperson for Belgium’s Centre for Cybersecurity, warned that all IT systems are potentially vulnerable and that artificial intelligence can now be leveraged by sophisticated actors to exploit such weaknesses.
I only have two words for them: wake up, please, because there’s something going on.
Luc De Laet, founder and owner of Belgian butchery chain De Laet & Van Haver