Cyber-Attack Disables Refrigeration Systems Across Seven European Nations
Supermarket freezers forced into defrost mode, causing widespread food spoilage and financial losses.
1Widespread Refrigeration Sabotage
Dozens of supermarkets across seven European countries experienced a targeted cyber-attack on their refrigeration and freezer units. The breach caused systems to switch into defrost mode, raising temperatures to as high as 50C. This incident follows a similar pattern observed in French supermarkets during October, leading to significant inventory spoilage.
2Vulnerability in Remote Maintenance
Most affected supermarkets utilize internet-connected systems to facilitate remote maintenance and troubleshooting. Stephan Moelans, CEO of manufacturer Sabcobel, confirmed that attackers exploited these network connections. While software updates were initially considered, the company determined that the vulnerability requires physical modifications to the units to prevent further unauthorized remote access.
3Impact Across European Retailers
The attack affected major chains including Delhaize, Carrefour, and Spar in Belgium, alongside ICA and Coop stores in Sweden. In Ireland, 13 SuperValu locations reported issues, while Dutch butcher shops and Estonian Selver stores also suffered. Retailers are currently working to disconnect affected units from the network to contain the damage.
4Quantifying the Financial Damage
Individual store losses are substantial, with one Delhaize branch in Hoeilaart reporting 100,000 euros in spoiled produce alone. This figure excludes additional operational costs incurred from temporary store closures. Retailers like Ikea and Kesko are actively investigating the extent of the damage while supporting individual branches in managing their inventory recovery.
5International Security Investigations
National cyber-security agencies in Belgium and Sweden are actively monitoring the situation. The UK's National Cyber Security Centre is collaborating with international partners to analyze the incident, despite no reported breaches in Britain. Authorities are also investigating potential links to refrigeration malfunctions at US military bases reported earlier in August.
6Manufacturer and Retailer Response
Sabcobel has been working continuously to disconnect vulnerable units from the internet. Many retailers have shifted to more secure connections following the initial French incident in October. Despite these efforts, some units remain susceptible, forcing companies to implement emergency protocols to ensure that remaining inventory stays within safe temperature ranges.
7Operational Containment Strategies
Companies like Coop have stated that the situation is currently contained and under control. However, the incident highlights the fragility of interconnected retail infrastructure. Retailers are now prioritizing the physical modification of hardware to mitigate risks that software patches cannot address, ensuring that future remote maintenance does not become a security liability.
8Broader Implications for Infrastructure
This event underscores the critical security risks inherent in the Internet of Things within industrial retail settings. As supermarkets rely increasingly on remote management for efficiency, they become prime targets for malicious actors. The incident serves as a stark reminder that physical hardware security is essential for protecting perishable supply chains.