Supermarkets in at least seven European countries reported disruptions to their refrigeration and freezer systems on Monday, Nov. 2, following what several retailers and security firms identified as a cyberattack. Stores in Sweden, Belgium, Luxembourg, Ireland, Estonia, the Netherlands, and Finland reported that freezer temperatures rose as high as 50 degrees Celsius (122 degrees Fahrenheit) overnight. The incidents resulted in the loss of frozen and chilled food products.
The event follows a similar incident in October that affected hundreds of supermarkets in France, resulting in millions of euros in food waste. Stephan Moelans, CEO of the Belgian refrigeration firm Sabcobel, stated that the attackers switched unit evaporators to defrost mode. Moelans noted that while many customers switched to secure internet connections after the French attack, fully protecting the systems requires physical modifications to the hardware in addition to software updates.
In Belgium and Luxembourg, approximately 40 Delhaize supermarkets were affected, while Carrefour reported disruptions at 15 Belgian stores. In Sweden, the ICA and Coop chains confirmed a small number of their stores were hit, with some forced to close temporarily. Other affected retailers include SuperValu in Ireland, where 13 locations were impacted, and Selver in Estonia. Danish manufacturer Danfoss reported that at least 17 companies in the Netherlands, including butchers and neighborhood stores, were targeted.
For an individual store manager or small business owner, such as the butchers affected in the Netherlands, the attack resulted in the loss of stock and the labor costs associated with clearing units. Consumers at some locations noticed empty freezer aisles and temporary store closures beginning Monday morning. The incident highlights a vulnerability in modern infrastructure, where industrial cooling systems connected to the internet for remote maintenance can be manipulated to destroy perishable goods.
National cybersecurity agencies in Belgium and Sweden stated they are monitoring the situation, and the UK's National Cyber Security Centre is working with international partners to understand the details, though no UK incidents were reported. U.S. authorities are also investigating refrigeration malfunctions at military bases that occurred in August to determine if there is a link to the European events. No specific group has claimed responsibility for the attacks.