European Supermarket Chains Face Suspected Cyber-Attack on Cooling Systems
Temperature spikes in refrigeration units across Europe raise concerns over internet-connected infrastructure vulnerabilities.
1Widespread Refrigeration Disruptions
Supermarket chains in Sweden, Belgium, and Luxembourg reported significant temperature increases in their refrigeration and freezer units overnight. Retailers like ICA and Ahold Delhaize confirmed that dozens of stores were impacted by this IT incident. Technicians were mobilized as early as 1am to disconnect affected installations from the power grid.
2Pattern of Targeted Attacks
This incident mirrors a large-scale cyber-attack in France last October, where hackers seized control of cooling units in 700 supermarkets. That previous breach resulted in massive food losses, with some individual stores reporting damages exceeding 130,000 euros. Authorities are now investigating if these recent European disruptions share the same malicious origin.
3Technical Vulnerability of Infrastructure
Most modern supermarket cold aisles utilize internet connectivity for remote maintenance and automated failure alerts. Hackers exploited this connectivity to remotely override thermostat settings, pushing temperatures from -27C to over 50C. By disabling alarm systems, attackers ensured the temperature spikes went unnoticed until significant damage to meat and dairy occurred.
4Controller Security and Updates
The French investigation identified that hackers primarily targeted controllers manufactured by the Danish company Danfoss. Although Danfoss had identified security flaws in their systems last year and recommended firmware updates, many retailers failed to implement these patches. ANSSI confirmed that controllers from two other manufacturers were also targeted during the attacks.
5Operational Impact on Retailers
The scale of the disruption affected various retail formats, including Spar outlets, Shop Go convenience stores, and Proxy Delhaize minimarkets. Retailers were forced to discard vast quantities of fresh and frozen inventory to ensure safety. The logistical challenge of manually resetting these systems required immediate, round-the-clock intervention from specialized refrigeration technicians.
6Financial and Legal Consequences
In the French case, the Paris prosecutor’s office initiated a formal investigation into the attacks. Damages were not limited to food waste, as some incidents reportedly caused fires within the cooling units. The French government tasked the national cybersecurity agency, ANSSI, with analyzing the breach to prevent further exploitation of critical infrastructure.
7Systemic Risks in Connectivity
The repeated targeting of supermarket cooling systems highlights the inherent risks of integrating critical physical infrastructure with public internet networks. While remote management offers efficiency, it creates a massive attack surface for malicious actors. Retailers must now balance the benefits of automated maintenance against the potential for catastrophic, large-scale inventory loss.
8Future Security Outlook
The recurring nature of these attacks suggests that internet-connected industrial controllers remain a primary target for cybercriminals. Moving forward, retailers will likely face increased pressure to harden their network security and accelerate the deployment of security patches. The incident underscores the urgent need for robust, isolated network architectures in retail.