A suspected cyber-attack has disrupted commercial cooling systems at dozens of supermarkets across seven European countries, causing cooling units to malfunction and leading to substantial food waste.
The incident has affected retail outlets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland. Among those impacted are approximately 40 Delhaize locations in Belgium and Luxembourg, 15 Belgian Carrefour branches, and five franchise stores operated under the Colruyt Group. Outlets operated by supermarket chains including ICA and Coop in Sweden, SuperValu in Ireland, Selver in Estonia, and K-stores in Finland also reported failures. In the Netherlands, cooling systems across at least 17 companies, including butcher shops and small local stores, were targeted.
Defrost Settings Triggered Remotely
According to Stephan Moelans, chief executive of Belgian refrigeration manufacturer Sabcobel, the digital intrusion caused the evaporators inside affected fridges to switch into defrost mode. This setting forced the internal temperatures to rise dramatically, with readings in several locations reportedly reaching as high as 50 degrees Celsius.
Moelans stated that the breach appears to mirror an earlier cyber incident that targeted hundreds of French grocers in early October. He noted that while many retailers subsequently moved their systems to secure internet connections for remote maintenance, fully resolving the security vulnerability requires physical equipment modifications in addition to software updates.
Widespread Inventory Losses and Official Oversight
The sudden rise in temperature forced stores to dispose of millions of euros worth of spoiled perishables. One Delhaize branch in Hoeilaart, Belgium, reported losing approximately €100,000 in food stock, excluding additional revenue lost during temporary closures. In Sweden, store staff were recorded discarding large quantities of spoiled produce before reopening impacted branches.
National cyber-security authorities in Belgium and Sweden confirmed they are monitoring the situation. The UK’s National Cyber Security Centre stated it is liaising with international partners and industry representatives to evaluate the incident, noting that no British stores have reported disruptions. The identity of the perpetrators remains unknown.
Source: BBC News
