Supermarket chains across five European countries reported unexpected temperature spikes in refrigeration systems overnight, leading to spoiled food and operational disruptions. The incidents follow a similar cyberattack on French supermarkets last month, raising concerns about vulnerabilities in critical infrastructure.
Sweden and Belgium confirm cyber incidents affecting cooling systems
In Sweden, grocery chains Coop and ICA Sverige confirmed that unauthorized actors accessed and tampered with refrigeration systems at multiple locations. Coop reported that seven of its 800+ stores were affected, while ICA Sverige stated a "small number" of its stores experienced disruptions. An ICA store manager told local media that freezers were set to 50°C (122°F), rendering them inoperable. Sweden’s national cybersecurity center is assisting in the response.
In Belgium, retail groups Ahold Delhaize and Carrefour reported IT incidents impacting refrigeration systems in dozens of stores. Ahold Delhaize confirmed the issue affected "a number of Delhaize stores," while Carrefour stated 15 of its locations were compromised. A Delhaize spokesperson said teams were assessing the situation and would provide updates as available. Local media reported that a Delhaize store manager discarded refrigerated goods as a precaution.
Ireland, Estonia, and Luxembourg also report disruptions
In Ireland, SuperValu stores owned by Musgrave Group experienced refrigeration system failures, affecting 13 locations. The company did not specify the cause but confirmed that chilled and frozen produce had to be discarded. Musgrave stated a "specific model of refrigeration" was impacted without further details.
In Estonia, refrigeration company Kitman Coldtech reported a cyberattack targeting its systems, though the scope of the impact on supermarkets was not immediately clear. In Luxembourg, Ahold Delhaize also reported disruptions, though the extent of the damage was not detailed.
French supermarket attack serves as precedent
The incidents mirror a cyberattack on French supermarkets last month, which affected hundreds of locations. Chains including E. Leclerc, Intermarché, and Cooperative U reported refrigerator temperatures surging to 122°F (50°C), forcing the disposal of perishable goods. French authorities are investigating the attack, which caused significant financial losses.
Technical details and response efforts
Belgian refrigeration company Sabcobel, which operates systems for Ahold Delhaize and other chains, confirmed that a cyberattack was responsible for the temperature spikes. Sabcobel’s CEO, Stephan Moelans, stated that fridge and freezer units were switched into defrost mode, and technicians worked overnight to disconnect affected units from the network. Moelans noted that while efforts had been made to secure systems, many units required manual intervention.
Swedish and Belgian authorities, along with affected retailers, are coordinating responses to contain the incidents and prevent further disruptions. No group has claimed responsibility for the attacks, and investigations are ongoing.
Broader implications for critical infrastructure
The incidents highlight the growing threat of cyberattacks on interlinked infrastructure, particularly in sectors reliant on automated systems. Experts warn that such breaches could become more frequent as digital connectivity expands, posing risks to food supply chains and public health. Retailers are reviewing security protocols, though the full extent of the vulnerabilities remains under scrutiny.