Cyber-Attack Disrupts Refrigeration Systems in European Supermarkets
A significant cyber-attack affecting refrigeration systems has come to light, impacting supermarkets across at least nine European nations. This incident, which occurred on November 1, has resulted in the destruction of considerable food stock, raising concerns about the vulnerabilities within the food supply chain.
Reports and statements from various supermarket retailers in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden have emerged regarding this alarming incident. As investigations continue, the exact details surrounding how the breach occurred and the identity of the attackers remain unconfirmed. However, analysts note that the nature of this recent attack bears a striking resemblance to a previous incident that took place in October 2026, which targeted refrigeration systems of providers such as Danfoss and Copeland. That attack led to hackers tampering with temperatures on internet-connected refrigerators within numerous supermarket chains in France, setting them as high as 50°C (122°F) and ruining the food stored inside.
Among the businesses affected by this latest cyber incident is SuperValu, a supermarket chain based in Ireland. The Irish Times reported that a spokesperson for the retailer confirmed the cyber-attack affected a specific model of refrigerator utilized in their stores. As a precautionary measure, SuperValu took the necessary steps to remove chilled and frozen products from shelves in 13 of its locations.
In Sweden, retailers such as ICA Sweden also reported disruptions. A store under the ICA banner indicated that their fridges and freezers had been compromised, with temperatures being manipulated to 50°C. Following this, Sweden’s National Cyber Security Centre (NCSC) released a statement indicating their ongoing monitoring of incidents affecting freezer and refrigeration systems within the grocery sector. The agency confirmed its engagement with businesses affected and communicated with counterparts in several Nordic and European nations to address the situation effectively.
In addition, Ikea reported that its refrigeration units were impacted by this extensive cyber-attack. A spokesperson, as cited by Agence France-Presse on November 3, highlighted that their outlet in Mons, Belgium, experienced a breach that resulted in a rise in freezer temperatures, further amplifying concerns within the retail sector.
As the situation unfolded, concerns regarding the impact on food suppliers in the United Kingdom also materialized. On November 3, reports surfaced indicating that businesses within the UK’s food supply chain had been affected by the recent cyber-attack. The NCSC’s chief executive, Richard Horne, shared insights during an interview on the BBC’s ‘Today’ program, indicating that the agency was aware of several instances where vulnerable technology had been exploited in the UK. The NCSC has since alerted potentially affected companies, emphasizing the need for vigilance in light of the escalating cyber threats.
Highlighting the seriousness of the situation, EU Agriculture and Food Commissioner Christophe Hansen characterized these recent cyber incidents, alongside the attack on Danfoss, as deliberate attempts to disrupt the food supply chain and diminish consumer confidence. He remarked on the need for Europe’s food supply infrastructure to brace itself against new and evolving threats, stating that frequent cyber-attacks are adversely affecting retailers economically while leaving consumers facing empty shelves.
As discussions about the attacks are scheduled for the next meeting of the European Commission’s Security College, there is growing speculation surrounding possible nation-state involvement. Thus far, no group has claimed responsibility for either the attack on Danfoss or the current wave affecting supermarkets.
The increasing frequency of such targeted cyber incidents indicates a concerning trend, as articulated by Amir Preminger, CTO of Claroty. He stated that the second round of assaults on refrigeration systems highlights a growing pattern where threat actors increasingly aim for widespread, impactful disruptions to essential services. Amid heightened geopolitical tensions, attacks on critical infrastructure are rising, with AI technologies enabling aggressors to rapidly identify weaknesses and vulnerabilities within network systems.
As the investigation continues, the repercussions of this cyber-attack are being felt across the affected nations, underscoring the pressing need for enhanced cybersecurity measures in retail and food supply chains. The ramifications of such breaches serve as a reminder of the evolving landscape of cyber threats that require constant vigilance and preparedness from businesses and governments alike.