The short version
- Refrigeration units in supermarkets across seven European countries were compromised by a cyberattack that raised internal temperatures to dangerous levels, resulting in significant food waste.
- The incident mirrors a similar attack on French retailers last month, exploiting known vulnerabilities in remote management systems for cold storage equipment.
- UK security agencies report only minor instances of exploitation domestically, urging businesses to update aging technology and isolate critical infrastructure from the internet.
A coordinated cyberattack targeted supermarket refrigeration systems across seven European countries on Monday, causing temperatures in freezers and coolers to spike dramatically. Retailers in Belgium, Sweden, Ireland, Finland, Estonia, the Netherlands, and Luxembourg reported that their cooling units malfunctioned overnight, with some internal temperatures rising as high as 50C (122F). The incident forced many stores to discard large quantities of fresh and frozen produce, echoing a similar wave of attacks that struck hundreds of French supermarkets in early October.
The technical mechanism behind the disruption appears consistent with previous breaches. Stephan Moelans, chief executive of Sabcobel, a Belgian firm that manages refrigeration systems for major retailers including Delhaize, confirmed that attackers had switched evaporators into defrost mode. This action caused the units to warm up rapidly rather than maintain cold storage conditions. Moelans stated that technicians worked through the night and morning to disconnect affected installations from the network, noting that physical modifications are required to fully protect these devices, as software updates alone are insufficient.
The financial and operational toll on retailers has been immediate and severe. In Belgium, a Delhaize branch in Hoeilaart estimated losses of €100,000 (£83,500) in spoiled produce, a figure that did not account for revenue lost during store closures. Mathieu Tilman, a manager at the affected location, described the situation as distressing, highlighting the irony of wasting food while many people face hunger. Similar disruptions were reported by Carrefour, which saw 15 of its Belgian stores impacted, and Colruyt Group, which identified five Spar outlets with compromised fridge systems.
In Sweden, several grocery chains including ICA and Coop confirmed that a limited number of locations were hit. An ICA store in Sjöbo posted on social media that hackers had set temperatures to 50C overnight, destroying inventory. John Billow, head of Sweden’s national cybersecurity centre, noted that the country has a significant number of exposed operational technology devices that require urgent patching or replacement. Meanwhile, in Finland, Kesko reported investigating similar issues at its K-stores, and in Estonia, Kitman Coldtech stated that attackers accessed control computers at a Selver supermarket, though damage was contained quickly.
The United Kingdom has so far experienced minimal impact from this wave of attacks. The National Cyber Security Centre (NCSC) acknowledged awareness of a few instances where vulnerable technology was exploited but emphasized that the overall effect on UK food supply chains is limited. Dr Richard Horne, the NCSC’s chief executive, stated that while his team worked through the night to alert potentially affected organizations, no major supermarkets have reported significant disruptions. However, the British Association of Independent Meat Suppliers noted that some members experienced unexpected temperature rises in empty units, serving as a warning for the broader industry.
Security experts warn that these incidents highlight systemic weaknesses in the technology underpinning daily commercial operations. Horne pointed out that many organizations rely on extended systems that have reached their end of life without being upgraded or properly isolated from the internet. These outdated technologies represent easy targets for hackers, a vulnerability exacerbated by the use of artificial intelligence by adversaries to identify and exploit flaws more rapidly. The NCSC is currently working with UK organizations to identify and close existing vulnerabilities before they can be further exploited.
European officials are expressing growing concern over the strategic implications of such attacks. Christophe Hansen, the EU food and agriculture commissioner, described the repeated cyberattacks as a deliberate attempt to disrupt the food supply chain and undermine consumer confidence. With most European supermarkets linked to the internet for remote maintenance, the potential for government-sponsored hybrid attacks remains a significant fear, particularly in the context of ongoing geopolitical tensions following Russia’s invasion of Ukraine.
Retailers are now scrambling to secure their infrastructure while managing the immediate fallout. Graham Wynn of the British Retail Consortium stated that members are investing heavily in cybersecurity and collaborating with the NCSC to harden their systems against future threats. As investigations continue, it remains unclear who is behind the latest attacks, though US authorities are examining potential links to refrigeration malfunctions at American military bases earlier this year. The incident serves as a stark reminder of the fragility of modern supply chains in an increasingly digital world.
Sources behind this briefing
Go to the original reporting
- BBC Technology↗UK meat industry hit by cyber-attack which targeted European supermarket freezers
- BBC Business↗Shop freezers in seven European countries hit by cyber-attack
- The Guardian Business↗Shop fridges and freezers across Europe hit by fresh suspected cyber-attack
