European supermarkets have been hit by a wave of suspected cyberattacks targeting refrigeration systems, with hackers remotely changing temperatures in fridges and freezers and causing significant food losses. Incidents were reported on November 2 across Belgium, Sweden, Luxembourg, Ireland, the Netherlands, Finland and Estonia, raising fresh concerns about the security of systems controlling essential retail infrastructure.
The incidents affected major retailers and individual stores, with some refrigeration units reportedly reaching temperatures of 50°C. In Sweden, an ICA supermarket sales manager described the damage as total after the store’s freezers overheated overnight. “Everything is destroyed,” Engla Ingwall told Reuters, explaining that the incident had gone unnoticed for several hours.
Belgium and Luxembourg experienced some of the most extensive disruption. More than 40 supermarkets were reportedly affected, including stores operated by major retail groups. Carrefour confirmed that approximately 15 of its Belgian stores experienced refrigeration problems, while Colruyt reported incidents involving five stores operating under its Spar franchise.
Hackers Target Refrigeration Systems Across Multiple Countries
In Sweden, supermarket chains ICA and Coop reported incidents involving their cooling systems. ICA said a limited number of stores had been affected, while Coop reported problems at six locations. Some stores had to remove spoiled chilled and frozen products from sale.
Ireland also experienced disruption, with Musgrave Group reporting refrigeration problems in 13 SuperValu stores. The company said its monitoring systems alerted it to the issue and that it took immediate action. Some products were removed from sale while the investigation continued.
In Estonia, hackers accessed a computer controlling refrigeration at a Selver supermarket and changed a freezer setting to 50°C. The retailer said the incident was detected quickly and caused no product damage. Finland also reported abnormal temperatures at several smaller grocery stores, although authorities had not confirmed a successful cyberattack there.
The technical method appears to involve remote access to refrigeration controls. Belgian refrigeration company Sabcobel said affected units had been switched into defrost mode, causing temperatures to rise. These systems are often connected to networks to enable remote monitoring and maintenance, creating potential entry points if equipment is inadequately protected.
The latest incidents follow a similar attack in France last month, when hackers reportedly accessed cooling systems at hundreds of supermarkets. Temperatures in some units climbed as high as 50°C to 80°C, resulting in major food losses and fires at several stores. The recurrence suggests that weaknesses in connected refrigeration equipment deserve closer attention.
Authorities Investigate as Questions About the Attackers Remain
The identity of those behind Monday’s incidents remains unknown. Reuters reported that it could not establish who carried out the attacks or whether they were connected to the earlier incidents in France. No group has publicly claimed responsibility.
Belgium’s Centre for Cybersecurity said it was concerned about the growing number of incidents. Sweden’s national cybersecurity centre is also investigating reports involving grocery stores. Authorities have highlighted exposed operational technology devices and the importance of updating and patching vulnerable equipment.
The potential economic consequences extend beyond the cost of replacing spoiled food. Supermarkets operate on tight margins, and refrigeration failures can force stores to remove large quantities of products, disrupt operations and affect supply chains. Smaller retailers may be particularly exposed because they have fewer resources to maintain and secure technical systems.
Reports have also circulated about freezer malfunctions at US military bases, with suspicions of cyber interference. However, the European incidents reported by Reuters do not establish a connection to those cases, and the claims should be investigated separately rather than treated as part of a confirmed coordinated campaign.
The latest attacks demonstrate how cyber threats can affect physical infrastructure without targeting traditional computer networks or customer databases. A compromised refrigeration controller can cause immediate disruption and destroy valuable stock. For retailers across Europe, securing these systems is becoming an operational necessity rather than simply an IT concern.
About The Author
