Dozens of commercial supermarket freezers and refrigerators across seven European countries suffered deliberate remote tampering early Monday morning, with thermostats manipulated to reach temperatures as high as 50°C (122°F).
The Bottom Line
- The Scope: Retailers across Belgium, Sweden, Luxembourg, Finland, Ireland, Estonia, and the Netherlands reported severe inventory losses, with individual stores sustaining damages exceeding €100,000.
- The Vulnerability: Attackers exploited internet-exposed refrigeration management software without deploying malware, effectively using remote access to switch evaporators into defrost mode.
- The Attribution: Cybersecurity investigators at Sophos point toward state-backed signaling or lone-actor sabotage, while Western intelligence agencies warn of escalating infrastructure disruptions originating from Moscow.
Retail Giants Count Losses Across Seven European Nations
The coordinated digital intrusion struck commercial retail infrastructure overnight, forcing store managers to discard massive quantities of spoiled food. In Belgium, retail group Ahold Delhaize confirmed that 40 Delhaize supermarkets sustained severe temperature spikes. According to reporting from the BBC, a single Delhaize branch in Hoeilaart watched its frozen inventory of pizzas and ice cream ruin, accumulating over €100,000 in perishable damage.
the ai and cyber folks have predicted the progression of this stuff in a way that makes me pretty uncomfortable for what could be next! https://t.co/4swzSHP7dT
Additional incidents hit Carrefour and Colruyt branches in Belgium, alongside Delhaize locations in Luxembourg. Across Sweden, grocers ICA and Coop reported multiple store freezers failing simultaneously. Retailers in Finland, Ireland, Estonia, and the Netherlands similarly scrambled to discard spoiled stock after local systems malfunctioned. Stephan Moelans, CEO of Belgian refrigeration installer Sabcobel, noted that technicians were mobilized at 1 a.m. to disconnect affected units from the network.
How Attackers Hijacked Unpatched Commercial Refrigeration Software
The cyberattack mirrored an October incident in France where hackers seized control of cooling units at hundreds of retail locations, causing fires and widespread food loss. Unlike traditional ransomware campaigns that lock out users for financial extortion, this operation left no malware behind. Rafe Pilling, senior director for threat intelligence at Sophos, compared the intrusion to someone wearing rubber gloves and manually flipping switches.
Investigators identified internet-exposed appliance management software as the primary entry point. Nick Jackson, director of cyber-operations at Bitdefender, explained that commercial refrigeration software often goes long periods without updates because running patches requires taking heavy machinery offline. In Sweden, Coop revealed that several compromised refrigerators operated on vulnerable 4G mobile networks, while ICA confirmed its infrastructure utilized systems provided by Danish manufacturer Danfoss. The European Commission stated that the coordinated failures demonstrate how easily cyber operations can disrupt essential services and directly impact consumer daily routines.
Global Supply Chains Face Scrutiny Following Pentagon Investigations
The European incidents follow a parallel event in early August, when mysterious refrigeration failures struck commissaries across at least six U.S. military bases. The Pentagon continues to investigate those disruptions alongside the French supermarket hacks. While no hacktivist group has claimed responsibility, security analysts suspect geopolitical motives. Intelligence chiefs across Western Europe warn that Moscow is actively waging a broader campaign of physical and digital sabotage designed to undermine public confidence.
[Shop fridges and freezers across Europe hit by fresh suspected cyber-attack]“Chains in seven countries say cooling unit temperatures rose overnight in incident similar to hack of French shops“https://t.co/PhdOQqMZk3””
In the United Kingdom, which avoided the latest wave, regulatory affairs assistant director Graham Wynn confirmed that domestic supermarkets are working closely with the National Cyber Security Centre (NCSC) to harden freezer security. Forescout vice president of research Daniel dos Santos noted that internet-exposed refrigeration units are statistically less prevalent in British supermarkets compared to continental Europe, lowering immediate exposure risks but keeping regulators on high alert.
Disclaimer: The information provided in this article is for educational and informational purposes only and does not constitute financial advice.
