Cyberattack Targets Supermarket Refrigeration Systems Across Europe and U.S.
A coordinated cyberattack raised temperatures in internet-connected supermarket freezers and fridges in multiple European countries and U.S. military bases, causing food spoilage and financial losses.
Internet-connected refrigeration units in supermarkets across Europe experienced temperature spikes on Monday, leading to spoiled food and damage to equipment. The incident affected more than 100 stores in countries including Belgium, Luxembourg, France, Sweden and Ireland. Belgian retailer Delhaize reported dozens of outlets hit, while Carrefour said about 15 of its Belgian stores faced refrigeration problems. The Colruyt group, Swedish retailer Coop, and IKEA also confirmed disruptions at several locations. In Belgium, the butchery chain De Laet & Van Haver reported meat losses worth roughly €15,000 after fridges warmed to 18 °C. Irish wholesaler Musgrave said 13 SuperValu stores were affected.
Similar malfunctions were reported at U.S. military facilities. In August, freezers at an Army base in Arizona and a naval station in Rhode Island entered defrost mode, spoiling stored food. Pentagon officials described the incidents as suspected hacks and said investigators were coordinating with French authorities.
Cybersecurity experts explained that many refrigeration systems are managed remotely via internet-connected controllers that lack up-to-date security patches. "These systems should be managed via secure networks, but they are accessible on the Internet," said Awais Rashid, a professor of cybersecurity at the University of Bristol. He noted that outdated software, weak passwords and unpatched vulnerabilities make the controllers easy targets.
The motive for the attacks remains unclear. European Commissioner for Agriculture and Food Christophe Hansen called the incidents a "deliberate attempt to disrupt" the bloc’s food supply, while Rashid said the likely aim is disruption of the food-supply chain, which can have financial and societal impacts.
Belgium’s prosecutor’s office has opened a criminal investigation, but no group has claimed responsibility. Authorities have warned that state actors, including Russia, could be involved in broader cyber-operations against Europe. The UK’s National Cyber Security Centre also cautioned that AI-driven attacks on critical infrastructure may become more common by 2028.