Cyberattacks Target European Supermarket Refrigeration Systems for Second Time in a Month

Supermarket chains across Europe, including in Sweden, Belgium, Luxembourg, and Estonia, have experienced temperature spikes in their refrigeration and freezer systems, prompting fears of coordinated cyberattacks. The incidents follow a similar attack in France last month that caused significant food spoilage and losses estimated in the hundreds of thousands of euros. Ahold Delhaize, Coop, and ICA are among the retailers affected, with technicians working to disconnect impacted units from the network. In France, hackers targeted controllers supplied by Danish company Danfoss, disabling alarms and manipulating thermostats, raising temperatures from as low as -27C to over 50C. While the full scale of the latest incidents remains under investigation, Sabcobel, a Belgian refrigeration system installation company, has attributed the current attacks to hackers switching evaporators into defrost mode. Danfoss had identified security flaws last year and recommended updates, but many systems require physical modifications, which require investment. French police are investigating the previous attack, which included food losses and fires, and France’s national cybersecurity agency, ANSSI, confirmed that controllers from multiple companies were targeted. The incidents highlight the vulnerability of internet-connected supermarket systems and raise concerns about the security of food supply chains.

Where they differ

• The Verge emphasized the increasing number of suspected hacks and the potential impact on food supply chains.
• CBS News highlighted the CEO of Sabcobel’s statement about the need for physical modifications to systems, which require investment.
• The Guardian provided the most detailed account of the French attack, including specific temperature ranges and losses reported by individual stores.

What is not yet known

• The identity of the attackers and their motives remains unclear.
• The full extent of the damage and financial losses from the latest attacks is still being assessed.

Background

• In October 2026, France experienced nationwide protests linked to the rising cost of living and public services, resulting in hundreds of arrests [Fact Refinery, 2026-10-31].
• Cyberattacks targeting French supermarkets occurred in October 2026, causing significant food spoilage and losses estimated in the millions of euros, with vulnerabilities in Danfoss software identified [Fact Refinery, 2026-10-12].
• Ukraine and Russia both experienced cyberattacks on emergency alert apps in November 2026, with false warnings disseminated to citizens amid renewed fighting [Fact Refinery, 2026-11-02].
• Yersinia pestis*, the bacterium causing plague, repeatedly returned to Europe for over 400 years, evolving into new lineages and spreading through trade and migration [Fact Refinery, 2026-09-20].

Our reading

Our reading is that this series of attacks demonstrates a growing pattern of targeting critical infrastructure with cyberattacks across Europe. The repetition of attacks, this being the second in a month, and the targeting of refrigeration systems specifically, suggest a deliberate attempt to disrupt food supply chains. The fact that vulnerabilities were previously identified in the targeted systems, yet not fully addressed due to investment requirements, highlights a systemic weakness in securing essential services.

What to watch

• Confirmation of the attackers’ identity and motives from French or European law enforcement investigations [French police/ANSSI].
• Reports on the total financial losses incurred by affected supermarket chains, providing a clearer picture of the economic impact [Retailer financial statements].
• Updates on whether supermarket chains implement the recommended physical modifications to their systems, indicating a commitment to improved security [Danfoss/Retailer press releases].

Was this useful? 👍 0 👎 0

---

Read the original coverage