European Supermarket Freezers Hacked Again, Spoiling Millions in Food

3 min read
Source: BBC
European Supermarket Freezers Hacked Again, Spoiling Millions in Food
Photo: BBC
TL;DR

A suspected cyber-attack targeted refrigeration systems in Belgium, Sweden, Luxembourg, Ireland, and Estonia on November 1, 2026. The incident, which appears to be a repeat of a similar attack in France in October, caused freezers to spike to 50C, forcing retailers to discard millions of euros worth of food. While no group has claimed responsibility, national security agencies in Belgium and Sweden are monitoring the situation, and EU officials are urging stronger cybersecurity measures for critical infrastructure.

Key points

  • Approximately 40 Delhaize supermarkets in Belgium and Luxembourg were affected, with one branch in Hoeilaart reporting €100,000 in produce losses.
  • In Sweden, ICA and Coop reported incidents at several stores, with one ICA branch in Sjöbo confirming freezers were hacked to 50C overnight.
  • Thirteen SuperValu stores in Ireland were impacted, with Musgrave stating the issue was limited to a specific refrigeration model.
  • The attack follows a similar incident in October 2026 that affected up to 700 French supermarkets, causing fires and massive food spoilage.
  • Belgian and Swedish national cyber-security agencies are monitoring the incident, while EU Agriculture Commissioner Christophe Hansen emphasized the need for stronger cybersecurity in food supply chains.

Background

This incident follows a major cyber-attack in October 2026 that targeted internet-connected refrigeration controllers in approximately 700 French supermarkets, causing temperatures to spike from -27C to over 50C. That attack resulted in massive food spoilage, fires, and estimated losses of tens of millions of euros, highlighting critical gaps in industrial security. The current incident appears to be a repeat of that attack, targeting similar systems in multiple European countries.

How outlets are covering it

BBC and The Guardian reported on the incident in Belgium, Sweden, and Luxembourg, with The Guardian noting that the Dutch retailer Ahold Delhaize had reported a cybersecurity incident to Dutch police last month. NBC News reported on the incident in Belgium, Luxembourg, Sweden, and Estonia, while RTE.ie focused on the impact on SuperValu stores in Ireland. All sources agreed that the incident was a suspected cyber-attack, but they differed in the level of detail provided about the specific stores and the extent of the damage. The Guardian and NBC News both noted that the attack was similar to the one in France, while RTE.ie emphasized the response from Musgrave and the EU Agriculture Commissioner.

Why it matters

The incident highlights the vulnerability of internet-connected refrigeration systems in supermarkets and the potential for cyber-attacks to disrupt food supply chains. It also underscores the need for stronger cybersecurity measures in critical infrastructure, as emphasized by EU Agriculture Commissioner Christophe Hansen. The incident could have significant economic and social impacts, as it could lead to food shortages and increased prices for consumers.

What to watch

National cyber-security agencies in Belgium and Sweden are monitoring the incident, and EU officials are urging stronger cybersecurity measures for critical infrastructure. Retailers are working with cybersecurity specialists to resolve the issue and restore normal operations. It is not clear who is behind the attack, and no group has claimed responsibility. The incident could lead to increased scrutiny of cybersecurity in the retail sector and potentially new regulations or guidelines for protecting critical infrastructure.

Share this article

Want the full story? Read the original reporting

Read on BBC