Supermarket Freezers Hit by Cyber-Attack Across Seven European Nations

Dozens of supermarkets spanning seven European nations experienced a cyber-attack that targeted their commercial refrigerators and freezers. Around 40 Delhaize supermarkets faced disruptions in Belgium and Luxembourg, alongside a smaller number of locations impacted across Sweden, Ireland, the Netherlands, Estonia, and Finland.

Sabcobel, a Belgian manufacturer of certain affected refrigeration units, explained that the evaporators were forced into defrost mode, resulting in severe warming. This method mirrors an incident that struck hundreds of French supermarkets in October, causing millions of euros worth of spoiled food. Stephan Moelans, CEO of Sabcobel, stated that the company worked continuously to disconnect affected units from the network following the attack. He noted that while steps were taken after the French breach to mitigate vulnerabilities, physical modifications rather than software updates alone were required. Most European supermarkets rely on internet connectivity for remote troubleshooting and maintenance.

Supermarket freezers across seven European nations reached temperatures as high as 50 degrees Celsius following a cyber-attack.

Temperatures inside some freezers climbed as high as 50 degrees Celsius. In Flanders, a Delhaize branch in Hoeilaart estimated losses at 100,000 euros in wasted produce alone, excluding additional costs from temporary closure. Carrefour reported that 15 of its Belgian stores experienced issues, though measures kept all shops operational. Colruyt Group, operating Spar stores in Belgium, confirmed five affected locations, while Ikea stated its Mons store in western Belgium faced refrigeration issues. ICA confirmed a small number of stores outside its central network were impacted, with a branch in Sjöbo, southern Sweden, noting temperatures were deliberately altered. Seven Coop stores in Sweden and select K-stores in Finland also reported malfunctions, with security teams investigating the events. National cyber-security agencies in Belgium and Sweden are actively monitoring the situation, while the UK National Cyber Security Centre collaborates with international partners.

Why it matters

The incident highlights vulnerabilities in connected retail infrastructure, resulting in substantial food waste and financial losses for grocery operators across multiple countries. The disruptions underscore the challenges of securing remote-managed industrial appliances against coordinated digital interference.