Freezer Cyberattack Hits Supermarkets in 7 European Nations

Dozens of supermarkets across seven European countries were hit by a cyber-attack on their refrigerators and freezers on Monday, 2 November, the BBC reported: Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland.

It follows an attack last month that hit hundreds of French supermarkets. Around 40 Delhaize supermarkets in Belgium and Luxembourg were affected this time, according to the BBC, with smaller numbers of shops hit in the other five countries.

Who Was Hit

Carrefour said the incident affected 15 of its Belgian stores, according to the BBC. A Colruyt Group spokesperson told Reuters that five Spar shops in Belgium had their fridge systems attacked, the BBC reports, and Ikea said refrigeration at its store in Mons, Belgium, was affected.

In Sweden, ICA said a “small number of ICA stores operating outside ICA’s central network” were affected, and Coop told the BBC that seven of its 800 Swedish stores were hit. One ICA branch in Sjöbo wrote on social media that its refrigerators and freezers had been set to 50 degrees, the BBC reports.

In Ireland, 13 SuperValu supermarkets were affected, and the owner Musgrave Group told The Irish Times the impact was limited to a “specific model” of refrigerator, according to the BBC. Danfoss told Dutch broadcaster NOS that systems at at least 17 companies in the Netherlands were attacked. A Selver supermarket in Estonia and some K-stores in Finland were also affected, the BBC reports.

What the Equipment Maker Said

Stephan Moelans, chief executive of Sabcobel, the Belgian company that operates Delhaize’s refrigeration systems, told the Belga news agency it was a cyber-attack and that the company had been “working all night and morning to disconnect the affected units from the network”, according to the BBC.

Moelans said the affected units needed physical modifications, not only software updates, and that “The simplest solution is to manage the fridges over a secure internet connection”, the BBC reports. Most supermarkets’ refrigeration is linked to the internet so that maintenance can be done remotely, the BBC notes.

Belgium’s and Sweden’s national cyber-security agencies said they were monitoring the incident, and the UK’s National Cyber Security Centre said it was working with partners; no UK incidents were reported, according to the BBC. It is unclear who is behind the attack.

How It Compares With October

In the October attack, figures from individual chains suggested about 400 stores were affected out of roughly 15,000 in France, the BBC reported on 12 October. That attack targeted software provided by Danfoss, which said the affected units were older models whose security software could not be updated.

The store counts the BBC gives for named chains on 2 November add up to at least 80 stores (Delhaize about 40, Carrefour 15, SuperValu 13, Coop 7, Spar 5), by our arithmetic, plus the Dutch companies, Ikea Mons and the unquantified ICA, K-store and Selver sites. That is fewer stores than October’s roughly 400, but across seven countries rather than one.

Connecting the Coverage

Our cyber coverage today also includes Chainalysis Says an Agentic Attack Exposed Customer Emails and Apple, Meta Act on a Deepfake Network of 400+ Apps and Sites. As we read it, the freezer attacks are a case of connected store equipment becoming an operational risk: the losses come from spoiled stock and closed shops, not stolen data.

The Structural Read

As we read the BBC report, the fix the equipment operator describes is partly physical: Sabcobel’s chief executive said the units needed physical modifications, not only software updates, which makes remediation slower than a patch.

As we read it, the losses in both waves are counted in spoiled stock and closed shops, which puts connected store equipment on the list of operational risks retailers carry alongside data breaches.

Three Implications

FOR RETAILERS Delhaize, Carrefour, Spar, ICA, Coop, SuperValu, Ikea and others reported affected stores or systems on 2 November, according to the BBC.

FOR EQUIPMENT MAKERS Sabcobel said the affected units needed physical modifications, not just software updates, and Danfoss said in October that the affected units were older models whose security software could not be updated, per the BBC.

FOR GOVERNMENTS Belgium’s and Sweden’s national cyber-security agencies said they were monitoring the incident, and the UK’s National Cyber Security Centre said it was working with partners, the BBC reports.

Business Pill · Attack Surface

Every connected device a stranger could reach is another door to guard: the attack surface, explained in 60 seconds.

What Is Not Established

The BBC says it is unclear who is behind the attack. No source we read says artificial intelligence was used. The 50-degree figure comes from one store’s post as reported by the BBC; we have not seen a national agency confirm temperatures or a total store count. The post that flagged the spread to us named four countries; the BBC lists seven.

The Bottom Line

A second attack on supermarket refrigeration hit stores in seven European countries on 2 November, including about 40 Delhaize stores in Belgium and Luxembourg, the BBC reported, a month after about 400 French stores were hit.