Suspected Cyber-Attack Disrupts Supermarket Refrigeration Systems Across Europe
Hackers trigger mass defrosting in grocery freezers, causing significant food waste and financial losses.
1Widespread Refrigeration Sabotage
Dozens of supermarkets across six European countries face a coordinated cyber-attack targeting refrigeration systems. Affected retailers include Delhaize in Belgium, ICA and Coop in Sweden, and SuperValu in Ireland. The breach forced store freezers into defrost mode, causing temperatures to spike to 50C, leading to massive spoilage of perishable food inventory.
2Technical Mechanism of Attack
Sabcobel CEO Stephan Moelans confirmed the attack method mirrors an October incident in France. Hackers remotely manipulated evaporator settings, overriding standard cooling protocols. The vulnerability requires physical hardware modifications rather than simple software patches, complicating rapid remediation efforts for retailers currently struggling to secure their connected cooling infrastructure across multiple locations.
3Financial Impact on Retailers
The economic consequences are substantial, with individual stores reporting significant losses. A single Delhaize branch in Hoeilaart, Belgium, estimated damages at 100,000 euros, excluding additional costs from temporary store closures. Millions of euros worth of food products have been discarded across the affected regions, creating severe operational strain for local grocery chains.
4Response from Affected Chains
Major retailers are actively managing the crisis. Carrefour reported 15 affected Belgian stores, while Colruyt Group confirmed five impacted Spar locations. In Sweden, ICA and Coop are supporting stores operating outside their central networks. Companies are working to disconnect compromised units from public networks to prevent further temperature manipulation and inventory loss.
5Cross-Border Incident Scope
The attack extends beyond major chains, impacting smaller businesses as well. Danfoss, a Danish manufacturer, noted that at least 17 companies in the Netherlands, including local butcher shops, suffered system breaches. Estonia also reported incidents at Selver supermarkets, highlighting the vulnerability of standardized refrigeration hardware deployed across diverse retail environments throughout Europe.
6Security Limitations and Challenges
Despite warnings following the French incident in early October, many units remained vulnerable due to the necessity of physical modifications. While secure internet connections offer a partial solution, the speed of the attackers has outpaced the implementation of these security upgrades. Retailers are now prioritizing the isolation of vulnerable cooling systems from networks.
7Regulatory and Official Oversight
National cyber-security agencies in both Belgium and Sweden are actively monitoring the situation as investigations continue. While the identity of the perpetrators remains unknown, the coordinated nature of the attacks suggests a sophisticated understanding of industrial refrigeration control systems. Authorities are currently assessing the broader implications for critical retail infrastructure security.
8Future Retail Security Outlook
This incident underscores the growing risk of cyber-physical attacks on retail infrastructure. As grocery chains increasingly rely on connected IoT devices for temperature management, the need for robust, hardware-level security becomes critical. Future strategies must move beyond basic software updates to include comprehensive physical hardening of all networked refrigeration equipment assets.