Supermarkets across Belgium and Sweden report sudden overnight temperature spikes in fridges and freezers due to suspected hacks, mirroring French cyberattacks

Your groceries may be more expensive as supermarkets pass on the costs of spoiled food and increased cybersecurity measures.

Supermarket refrigeration systems in Belgium and Sweden have been targeted by a cyberattack, mirroring a recent incident in France. Hackers remotely raised the temperatures in freezers and refrigerators to 50 degrees Celsius, causing food stocks to spoil. The attack, which began Sunday night, affected major supermarket chains including Ahold Delhaize, ICA, and Coop, as well as individual stores like Delhaize, Carrefour, and Spar. Sabcobel, a refrigeration fitter, reported at least twenty affected units in Belgium. The hackers exploited the online-controlled systems by activating the defrost mode, overriding normal temperature controls. The scale of food destruction and financial losses is still being assessed, but is expected to be significant, potentially in the millions of dollars across the affected chains.

This coordinated cyberattack on European supermarket refrigeration systems highlights a growing vulnerability in critical infrastructure controlled by the Internet of Things (IoT). The attackers are demonstrating a sophisticated understanding of these systems, leveraging remote access to sabotage operations and cause widespread disruption. The repeated targeting of food storage indicates a potential trend in cyber warfare or criminal activity aimed at disrupting supply chains and causing economic damage through food spoilage.

The attacks necessitate a reassessment of IoT security protocols for cold chain logistics and retail environments. Supermarkets and their suppliers must invest in enhanced network segmentation, intrusion detection systems, and robust remote access controls to prevent future breaches. As these systems become more interconnected, the potential for cascading failures increases, emphasizing the need for proactive cybersecurity strategies rather than reactive responses.