European Supermarket Refrigeration Systems Crippled by Cyberattacks
Dozens of supermarkets across Belgium, Sweden, and Ireland suffered remote cyberattacks that overrode refrigeration controls and forced stores to dump food. The wave of digital intrusions mirrors a similar incident that struck hundreds of French grocery stores in October, though investigators have not yet identified who is responsible.
Compromised Freezers and Spoilage Losses in Belgium
Belgian retailers bore a heavy share of the overnight disruption. According to reporting by Nova.bg, roughly 40 Delhaize supermarkets and 15 Carrefour locations in Belgium and Luxembourg experienced unexpected temperature spikes in their cooling infrastructure. Delhaize spokesperson Sarah De Messter confirmed to local media that an IT incident hit dozens of their stores overnight, prompting technical teams to disconnect affected systems. Stefan Molans, chief executive of the Belgian refrigeration maintenance firm Sabcobel, told RTL Info that hackers deliberately switched the evaporators on cooling units into defrost mode. A manager at a Delhaize franchise in Hoeilaart, Flemish Brabant, told Het Laatste Nieuws that the store lost roughly 100,000 euros worth of stock, an estimate that excludes additional losses from forced temporary closures. Concurrently, Colruyt Group reported that five Spar franchise stores under its umbrella also suffered targeted refrigeration disruptions.
Temperature Jikes and Store Disruptions Across Sweden
In Sweden, operators ICA and Coop confirmed that digital intrusions disrupted localized cooling units outside their primary networks. According to bTV Новините, an ICA store in Sjöbo posted on social media that its refrigerators and freezers were hacked overnight and the internal temperature was adjusted to 50 degrees Celsius. While that location temporarily closed its doors, it resumed normal customer service later in the day. Boulevardbulgaria.bg noted that seven of Coop’s 800 Swedish supermarkets were similarly hit, though Coop representatives stated that operations were quickly brought under control. National cyberdefense agencies in both Sweden and Belgium opened investigations into the network intrusions.
Cross-Border Spread and International Scope
The operational disruption extended beyond Scandinavian and Benelux markets. Dimitrovgrad.bgvesti.net reported that Irish retailer Musgrave confirmed a cyberincident impacting refrigerated and frozen goods across 13 SuperValu stores, forcing the company to pull inventory from shelves. Similar technical anomalies with commercial cooling hardware were recorded in Estonia and Luxembourg. Security analysts and international news outlets noted clear structural parallels to the October 11–12 attacks in France, where unauthorized remote access forced temperatures up to 50 degrees Celsius across approximately 700 supermarkets operated by Intermarché, Carrefour, E.Leclerc, Monoprix, and Coopérative U.
Frequently Asked Questions About the European Supermarket Cyberattacks
Who has claimed responsibility for the cyberattacks on the supermarket refrigeration units?
As of early November, no hacker collective or individual group has publicly claimed responsibility for the intrusions in Belgium, Sweden, Ireland, or France. Law enforcement and national cybersecurity agencies in the affected countries have not publicly named a suspect or linked the incidents to a specific foreign actor.
How did the hackers manipulate the refrigeration and freezer systems?
According to maintenance experts cited by regional media, the attackers used remote access to switch commercial cooling evaporators directly into a defrost cycle. This manipulation drove internal temperatures up to 50 or 70 degrees Celsius, destroying perishable inventory overnight.
Are these incidents connected to the French supermarket attacks from October?
European cybersecurity investigators are actively examining potential links between the November incidents in Belgium, Sweden, and Ireland and the large-scale French attacks from the previous month. While the technical methods—remotely raising freezer temperatures—are identical, officials have not yet formally established whether the same perpetrators orchestrated both waves of attacks.
Keep reading