EU Commission Reviews Supermarket Security After Cooling System Cyberattacks
Officials investigate widespread refrigeration failures across six nations to bolster food supply chain resilience.
1Widespread Cooling System Failures
This week, supermarkets across six EU countries, including Sweden, Belgium, and the Netherlands, faced severe cyberattacks. Cooling systems in stores operated by retailers like Ahold Delhaize, Carrefour, and ICA reached temperatures up to 50°C. These incidents caused significant operational disruptions, forcing technicians to manually disconnect refrigeration units from the network to prevent further damage.
2Security College Intervention
Agriculture Commissioner Christophe Hansen announced that the Commission’s Security College will evaluate retailer backup protocols. Created by Ursula von der Leyen in March 2025, this body addresses threats to EU security. The Commission aims to determine how quickly retailers can respond to disruptions and whether these attacks represent a broader pattern of hybrid threats.
3Technical Vulnerability Analysis
Sabcobel, the firm managing cooling for Delhaize, confirmed that attackers remotely switched refrigeration units into defrost mode. CEO Stephan Moelans noted that securing legacy hardware requires physical modifications and significant capital investment. These vulnerabilities highlight the risks inherent in interconnected retail infrastructure, where older systems often lack the robust security needed to repel modern digital intrusions.
4Pattern of Hybrid Threats
The current incidents mirror attacks reported in France last month, where hackers targeted Danfoss-made control systems. Those earlier breaches caused food spoilage and fires, with Intermarché executives estimating potential costs in the millions of euros. The recurrence suggests a coordinated effort to disrupt essential services and erode public confidence in the European food supply chain.
5Supply Chain Security Concerns
While Commissioner Hansen stated that overall European food security remains intact, he warned that the supply chain is clearly vulnerable. The Commission previously engaged with affected French retailers in October to discuss these risks. Officials now view these deliberate disruptions as a serious warning that necessitates immediate policy adjustments to protect critical retail infrastructure.
6Economic and Consumer Impact
The cyberattacks have resulted in immediate economic losses for major retailers and created empty shelves for consumers. Beyond the direct financial burden of food spoilage, the Commission is concerned about the long-term impact on consumer trust. Protecting the integrity of the food supply chain is now a priority to prevent further erosion of public confidence.
7Lack of Identified Perpetrators
Despite the scale of the attacks across multiple countries, no group has claimed responsibility for the breaches. Authorities have not identified any suspects involved in the manipulation of refrigeration units. The anonymity of the attackers complicates the investigation, leaving retailers to focus on hardening their internal networks and physical hardware against future unauthorized remote access attempts.
8Future Regulatory Outlook
The upcoming Security College meeting will define how the EU mandates better defense standards for retailers. Although no specific date is set, cabinet chiefs agreed the review must occur soon. This shift signals a move toward stricter oversight of private sector infrastructure to ensure that essential services remain resilient against evolving digital threats across Europe.