Suspected cyberattacks forced overnight temperature spikes up to around 55°C (131°F) in grocery store refrigeration systems across Sweden, Ireland, Belgium, Luxembourg, and Estonia. The coordinated disruptions mirror an earlier wave of attacks in France that spoiled food and caused fires, exposing vulnerabilities in operational technology that once operated mechanically.
Retailers and cybersecurity authorities confirmed that the incidents left units with their evaporators switched to defrost mode. John Billow, head of Sweden’s national cybersecurity centre, stated that the agency has identified numerous exposed operational technology devices in the country requiring patches. Meanwhile, SuperValu reported that a specific model of refrigeration systems was affected at 13 of its 223 stores, and Ahold Delhaize recorded impacts across Belgium and Luxembourg.
Spreading Disruption Across European Retailers
The overnight temperature surges struck multiple major chains and supply nodes. In Sweden, store operators ICA and Coop confirmed sudden freezer malfunctions, while Axfood reported that a home delivery distribution center in the Gothenburg area was targeted. In Belgium, dozens of Ahold Delhaize stores and five Spar shops experienced overnight temperature increases. Kitman Coldtech, a technology supplier in Estonia, confirmed that at least one local supermarket chain was affected when its systems reached 50 degrees Celsius (122F).
Despite the widespread operational impact, affected companies emphasized that broader corporate networks remained secure. ICA noted that its central IT network was untouched because the impacted stores relied on an external supplier with connectivity outside the core network. No group or individual has claimed responsibility for the latest attacks or the preceding incidents in France.
Growing Concerns Over Infrastructure Security
The cross-border refrigeration failures have amplified regional anxieties regarding hybrid warfare. European states have increasingly blamed Moscow for infrastructure incidents, though Russia has repeatedly denied involvement in sabotage operations. A European Commission spokesperson warned that the events demonstrate how cyberattacks can directly disrupt daily citizen services.
As international agencies scramble to assess the full scope of the breach, key questions remain unresolved regarding the origin and methodology of the threat actors. While the UK has not been affected, the National Cyber Security Centre announced it is working with international partners to understand the details, and the Pentagon is investigating whether suspicious freezer failures at US military bases in August share a cyber link to the European attacks.
