Another cyberattack on supermarket fridges sweeps Europe, leaving food spoiled
Incident comes after a similar attack on supermarket fridges in France last month
A hacking attack on European supermarkets spread across the continent on Monday, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month.
asserted
that → sweep → France
The attack, which raised temperatures in refrigerator and freezer units at dozens of stores, hit supermarket groups Ahold Delhaize and Colruyt in Belgium and Luxembourg, as well as Swedish grocers ICA and Coop.
asserted
which → raise → Belgium
Furniture-to-meatballs retailer Ikea also saw at least one store affected.
asserted
store → see → meatballs
"Everything is destroyed," Engla Ingwall, sales manager at an ICA franchise store in Stockholm, told Reuters during a visit to the store on Monday, adding the attack occurred at 2 a.m., but was only noticed hours later.
"There has been a cyberattack and all our freezers reached 50 degrees [Celsius]."
asserted
freezers → destroy → degrees
A spokesperson for privately held ICA said the company was aware that a "limited number of stores were affected by an incident overnight, which impacted their refrigeration and freezer systems.
asserted
which → hold → systems
The latest incidents follow an attack in France last month when police said hackers seized control of cooling units at hundreds of supermarkets, causing fires and food losses.
asserted
hackers → follow → fires
Ahold Delhaize also reported a cybersecurity incident to police last month.
asserted
Delhaize → report → police
A notice informing customers that refrigerators are temporarily out of service is displayed on an empty case at the Delhaize Shop & Go store in Linkebeek, Belgium.
asserted
refrigerators → inform → Linkebeek
While no one has claimed responsibility for either attack, the incidents have heightened concerns among European authorities about hybrid threats to infrastructure amid growing security tensions since Russia's 2022 invasion of Ukraine.
asserted
incidents → claim → Ukraine
Moscow has repeatedly denied involvement in sabotage or hybrid warfare operations.
asserted
Moscow → deny → operations
Reuters could not establish who was behind Monday's attacks or whether they were linked to the incidents in France.
uncertain
they → establish → France
"It is not known who is behind this attack, and it may never be determined," said Katrien Eggers, spokesperson for Belgium's Centre for Cybersecurity, adding she was concerned about the growing number of incidents, in part due to AI.
"All IT systems are potentially vulnerable, and AI can now be used to successfully exploit these weaknesses — especially by sophisticated actors," she said.
uncertain
she → know → actors
From refrigerators and heating systems to security cameras and alarms, an expanding range of devices, once largely mechanical, are now connected to the internet and can now be monitored and controlled remotely, creating new opportunities for cybercriminals.
asserted
range → expand → cybercriminals
At least some of the refrigerator units affected on Monday used temperature control technology from Danish firm Danfoss that was also targeted in the French attack.
asserted
that → affect → attack
The firm said it had been working with customers to implement fixes.
asserted
it → say → fixes
During last month's French attack, Danfoss said the affected refrigeration units were running "outdated firmware," or had "reached end of life and no longer receive software or security updates."
asserted
units → say → updates
After a cybersecurity firm detailed a potential vulnerability in Danfoss's systems over the summer that could allow hackers to gain access to the fridges and change their temperatures remotely, the company released a patch and urged customers to install it.
uncertain
company → detail → it
It wasn't the first time the food system had been targeted by hackers, cybersecurity analyst Ritesh Kotak told CBC News last month.
asserted
Kotak → target → News
In 2021, meat supplier JBS was hit by a cyberattack that temporarily shut down operations in Canada, the U.S. and Australia.
asserted
that → hit → Canada
And a 2025 attack on United Natural Foods Inc. led to shortages at many Whole Foods stores.
asserted
attack → lead → stores
"This is something that, unfortunately, we're going to see more of," Kotak said, adding that the situation in France should serve as a "wake-up call" that such attacks need to be taken seriously.
asserted
attacks → go → call
Boxes of spoiled food are seen outside an Intermarche supermarket in Paris on Oct. 13, the day after a cyberattack targeted refrigeration systems at French supermarket chains, causing food losses and fires at several stores.
asserted
cyberattack → see → stores
The European Commission said the latest incidents highlight how digital threats are becoming increasingly disruptive.
asserted
threats → say → ?
"They are a deliberate attempt to disrupt our food supply chain and undermine consumers' confidence in it — a warning that we must take seriously," said EU commissioner for agriculture Christophe Hansen.
asserted
Hansen → disrupt → agriculture
"The repeated occurrence of these cyberattacks is deeply concerning."
asserted
occurrence → repeat → cyberattacks
A spokesperson for Colruyt Group, which operates Spar stores in Belgium under a franchise system, said five shops had their fridge systems attacked.
asserted
systems → operate → system
In Ireland, wholesaler Musgrave said the incident affected systems in 13 of its SuperValu stores, forcing it to remove some chilled and frozen products from sale.
asserted
incident → say → sale
Tom Hegel, a researcher at cybersecurity firm SentinelOne, said such attacks are typically linked to extortion, political motives or nation-state operations, with the absence of financial demands in recent cases pointing instead to sabotage.
asserted
absence → say → sabotage
"Retail is an easy target because retail chains run enormous estates of refrigeration controllers, building management systems, door access panels and point-of-sale gear," he said, adding it was hard to trace hackers targeting such systems.
"
asserted
it → run → systems
An attacker who logs into an exposed control panel leaves almost nothing behind ...
asserted
who → log → nothing
A teenager and an intelligence service would look much the same from the defender's side.
asserted
teenager → look → side
Grocers tossing thousands of dollars worth of food
Carrefour, which was badly hit in last month's French attack, said 15 of its 700 stores in Belgium were affected.
asserted
15 → toss → Belgium
Ikea said one store in Belgium had been impacted and that it could not rule out disruptions at other locations.
uncertain
it → say → locations
Privately held Swedish grocery chain Coop said that seven of its 800 stores were affected by a cyber incident involving unauthorized tampering with its refrigeration systems.
asserted
seven → hold → systems
It said Danfoss was among its suppliers.
asserted
Danfoss → say → suppliers
Luc De Laet, founder and owner of Belgian butchery chain De Laet & Van Haver, said he was woken at 3:30 a.m. by an employee telling him there was a problem.
asserted
he → say → him
He rushed to his store south of Antwerp and found the fridges turned up as high as 18 C.
He estimated the incident ruined about €15,000 ($23,485 Cdn) worth of meat.
asserted
incident → rush → meat
They are hacking the system that is doing the registration of the temperature, and they can program it at a distance," he told Reuters, adding that it was infuriating to throw away so much food.
asserted
it → hack → food
De Laet said he believed the hackers were trying to destabilize European economies.
asserted
hackers → say → economies
He had contacted police but did not know whether an investigation had been launched.
asserted
investigation → contact → police
…and 1 more, not listed.
The Aporia
