Reported by 1 source

The short version

  • Major supermarket chains in multiple European nations reported unauthorized remote adjustments to their refrigeration temperatures.
  • The incidents highlight vulnerabilities in modern retail infrastructure where cooling systems are connected to the internet for maintenance purposes.
  • This event follows similar suspected cyberattacks on French supermarkets and US military bases, suggesting a growing pattern of targeting critical food storage assets.

A significant wave of suspected cyberattacks has targeted grocery stores across several European nations, causing sudden and dangerous fluctuations in the temperatures of commercial refrigerators and freezers. The incidents have affected major supermarket chains operating in Belgium, Sweden, Luxembourg, and Estonia, according to local reports and statements from industry representatives. These disruptions represent a growing concern for food safety and supply chain integrity as retailers increasingly rely on connected technologies for operational efficiency.

In Sweden, the impact was particularly visible at an Ica Kvantum location, which reported via social media that its cooling systems had been compromised overnight. The unauthorized access resulted in temperatures within the units rising to approximately 50 degrees Celsius, or 122 Fahrenheit, a level sufficient to spoil perishable goods rapidly. This specific incident underscores the immediate physical consequences of digital intrusions on consumer-facing infrastructure.

News Journal

Other major retailers have also confirmed breaches in their systems. A spokesperson for the Swedish supermarket chain Coop stated that unauthorized actors managed to access and tamper with cooling systems at a small fraction of their locations. While the extent of the damage within Coop’s network remains limited, the confirmation of remote manipulation highlights the sophistication of the attackers and the potential reach of such vulnerabilities across large retail networks.

In neighboring countries, Dutch retailer Ahold Delhaize attributed temperature adjustments in dozens of its supermarkets in Belgium and Luxembourg to an IT incident. The company described the event as a technical failure resulting from unauthorized access, though the full scale of the disruption has not yet been fully confirmed. The simultaneous nature of these incidents across different national borders suggests a coordinated effort rather than isolated technical failures.

The vulnerability exploited in these attacks stems from the modernization of retail infrastructure. Many contemporary supermarket refrigeration units are connected to the internet to facilitate remote maintenance, real-time monitoring, and automated alerts for system failures. While this connectivity offers operational benefits, it also creates entry points for malicious actors who can manipulate physical environments through digital means. The increasing frequency of such hacks raises serious questions about the security protocols governing these essential systems.

This latest wave of intrusions follows a similar incident last month that targeted hundreds of refrigerators in French supermarkets. That earlier attack resulted in significant food spoilage, with estimated losses reaching millions of Euros. The recurrence of such events within a short timeframe indicates a persistent threat to the European grocery sector and suggests that attackers are actively testing and exploiting weaknesses in retail technology.

Beyond Europe, similar patterns have emerged elsewhere. A string of freezer malfunctions at US military bases has also been suspected to be the result of cyberattacks. These incidents collectively point to a broader trend where critical infrastructure, including food storage systems, is becoming a target for digital warfare or criminal exploitation. The convergence of these events highlights the need for improved cybersecurity measures in sectors traditionally viewed as low-risk targets.

As investigations continue, the full scope of the damage remains unclear. Retailers are working to assess the extent of food spoilage and restore normal operations, but the incident serves as a stark reminder of the fragility of modern supply chains. The ability of remote actors to physically disrupt food storage systems poses not only financial risks but also potential public health concerns if spoiled products were distributed before detection.

Industry experts warn that without significant upgrades to security standards, similar attacks could become more frequent and widespread. The integration of internet-connected devices in critical infrastructure requires robust protection against unauthorized access. As retailers and governments respond to these threats, the focus will likely shift toward developing more resilient systems that can withstand digital intrusions while maintaining operational efficiency.

The coming weeks will be crucial in determining how effectively retailers and regulators address these vulnerabilities. Immediate responses include tightening network security, conducting audits of connected devices, and enhancing monitoring systems to detect unauthorized access early. Long-term solutions may involve redesigning the architecture of retail technology to minimize exposure to external threats while preserving the benefits of digital connectivity.

Sources behind this briefing

Go to the original reporting

  • The Verge↗More European supermarkets are getting their freezers hacked