Suspected Cyberattack Pushes Supermarket Freezers Across Europe Into Dangerous Temperatures

Supermarkets in at least seven European countries reported overnight disruptions to refrigerators and freezers on Nov. 2, with temperature controls pushed sharply higher and food removed from sale. Incidents were reported in Belgium, Luxembourg, Sweden, the Netherlands, Estonia, Ireland and Finland. The BBC said roughly 40 Delhaize stores in Belgium and Luxembourg were affected, while other countries reported smaller clusters.

The disruptions followed a similar incident in France several weeks earlier, turning a series of isolated equipment failures into a wider cybersecurity concern. Retailers discarded chilled and frozen products after staff found units operating outside safe ranges. Some reports put the highest temperatures near 50C, although the precise readings and the number of affected stores varied by country and retailer.

The reported failures involved connected refrigeration equipment whose controls were accessed or manipulated remotely. Belgian manufacturer Sabcobel said the incident affecting some Delhaize systems was a cyberattack, while retailers described the event in more cautious terms as an IT incident while assessments continued.

The French attack provided a clear precedent. Hundreds of supermarkets there reportedly had software controlling refrigeration units taken over, causing some systems to warm to about 50C and spoiling fresh and frozen food estimated at millions of euros. The European incidents share the same operational signature, but investigators have not publicly identified a perpetrator, intrusion method or common command infrastructure.

The immediate damage is product loss, emergency inspections and disrupted store operations. Supermarkets had to isolate or dispose of food exposed to unsafe temperatures, while technicians worked to reset equipment and determine whether systems remained compromised. The Independent reported that retailers in Belgium, Ireland, Luxembourg and Sweden threw away spoiled goods after the overnight failures.

Ahold Delhaize confirmed that an IT incident affected refrigeration systems in some Dutch stores and said teams were assessing the situation. SuperValu in Ireland also reported refrigeration problems. The scale remains uneven: Belgium and Luxembourg account for the clearest concentration, while Swedish authorities are handling several cases involving supermarket cooling systems, according to The Next Web.

The incidents expose a practical weakness in supermarket infrastructure: refrigeration has become networked, remotely managed and tightly tied to inventory and food-safety processes. An attacker who reaches those controls doesn't need to steal customer data to cause disruption. Changing a temperature setting can create physical damage, waste stock and force stores to close sections of a shop.

That risk extends beyond supermarkets. The Pentagon is investigating refrigeration failures at more than half a dozen U.S. military commissaries in August as possible cyberattacks, Fortune reported, citing officials and a Reuters report. The connection to the European incidents remains unproven, but the cases have widened attention from retail cybersecurity to connected cold-storage systems across critical facilities.

Authorities and affected companies are now comparing technical logs, vendor access records and the timing of temperature changes. Sweden's National Cyber Security Centre is handling several cases, while manufacturers and supermarket operators are assessing whether the affected systems share software, maintenance arrangements or remote-access pathways.

The central question is whether the incidents form one coordinated campaign or represent copycat attacks against similar equipment. Publicly available accounts establish a common pattern and a close sequence of events, but they don't establish attribution. Retailers will also need to show that products exposed to unsafe temperatures were removed quickly enough to protect consumers, and that restored systems are monitored rather than simply restarted.

Supermarket operators are expected to tighten remote access, separate refrigeration controls from broader corporate networks and add independent alarms that staff can verify on site. The attacks also put pressure on equipment makers and maintenance contractors, whose systems can become an entry point even when a retailer's main network is secure.

For shoppers, the direct effect is limited to affected stores and products, but the episode demonstrates how a small change in an industrial control system can produce immediate economic and food-safety consequences. Further findings from national cyber agencies, retailers and Sabcobel will determine whether Europe is facing a coordinated campaign, a shared vendor vulnerability or several opportunistic intrusions using the same exposed technology.