Supermarket freezers across Europe hit by second suspected cyber-attack

Supermarket refrigeration systems are now a viable target for sabotage, leading to spoiled stock and operational disruption.

Supermarket chains across at least seven European countries reported their refrigeration and freezer temperatures soared overnight, indicating a potential widespread cyber-attack. Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands, and Sweden experienced issues with their cooling systems, mirroring a recent attack in France that resulted in millions of euros in losses. In Sweden, several ICA and Coop stores reported temperatures reaching 50C (122F), leading to food spoilage. Similarly, Ahold Delhaize supermarkets in Belgium and Luxembourg experienced disruptions, with signs at affected stores citing cyberattacks. Belgian chains like Delhaize, Colruyt, Intermarché, and Carrefour, along with Ikea Belgium, also reported affected refrigeration units. These incidents highlight vulnerabilities in operational technology, as many refrigeration systems remain exposed and unpatched, making them susceptible to remote manipulation and sabotage.

The widespread nature of these attacks, affecting multiple countries and diverse retail chains, suggests a coordinated effort or the exploitation of a common, unpatched vulnerability in operational technology (OT) devices. This incident escalates concerns about the security of IoT-enabled infrastructure in critical sectors, demonstrating that even temperature control systems are susceptible to remote hijacking with immediate and costly consequences. The lack of ransom demands in these cases points towards sabotage as the primary motive, potentially from state-sponsored actors or hacktivist groups seeking to disrupt supply chains.

This event underscores a critical blind spot in the cybersecurity strategies of many large retail operations, which may have prioritized IT security over the vulnerability of their OT systems. As more industrial control systems become internet-connected, the attack surface expands, and the potential for cascading failures increases. Retailers and industrial operators must now urgently assess and patch their OT systems, particularly refrigeration controllers and building management systems, to prevent similar disruptions and secure their supply chains against this emerging threat vector.