Supermarkets across Belgium, Estonia, Ireland, Luxembourg, and Sweden reported anomalies in their freezer systems on Monday in an apparent cyberattack. This incident closely mirrors one in France three weeks prior, where unidentified actors allegedly hijacked refrigeration systems, set them to defrost, and spoiled fresh and frozen food stocks.
Supermarket Disruptions Across Europe
Swedish supermarket chains ICA and Coop reported that a limited number of their stores were affected on Monday. ICA spokeswoman Helena Johansson told Deutsche Welle that the company is investigating the event and its scale. Coop spokesman Carlos Cancino stated to the French AFP news agency that six of approximately 800 Coop stores in Sweden suffered impacts, noting he had received no information confirming a cyberattack.
Dutch supermarket chain Ahold Delhaize announced that an overnight information technology incident disrupted freezers across multiple stores in Belgium and Luxembourg. In Ireland, public broadcaster RTE reported that 13 supermarkets sustained impacts. Additional chains including Carrefour, Intermarche, and Spar were also targeted, with Carrefour’s Belgium spokesman Mich Vergauwen stating that it was definitely a cyberattack and that no other reasons existed. A spokesperson for Belgium’s prosecutor’s office told Reuters that authorities launched a criminal investigation.
Official Reactions and Investigation
European Commissioner for Agriculture and Food Christophe Hansen described the events as a deliberate attempt to compromise European food supplies. He added that while overall food security faces no immediate risk, the resulting food waste and business impacts remain significant. A Commission spokesperson noted that these occurrences demonstrate how cyberattacks can disrupt services, impact businesses, and directly affect the daily lives of citizens.
The latest disruptions forced the disposal of spoiled goods and renewed concerns regarding food safety, similar to the events of October 12. At an ICA Kvantum branch in Sjobo, southern Sweden, temperatures within the refrigeration systems were remotely increased to 50 degrees Celsius, equivalent to 122 degrees Fahrenheit. John Billow, head of Sweden’s National Cybersecurity Center, informed Reuters that his department is actively investigating the incident, pointing out that recent weeks revealed numerous exposed operational technology devices in the country that required updates or patches.
Such exposed operational technology encompasses refrigerators, heating systems, security cameras, and alarm networks. These devices, once primarily mechanical, are now frequently monitored and controlled remotely, creating expanded vulnerabilities that cybercriminals can exploit.
