On Monday, a wave of cyber‑attacks hit supermarket chains across at least ten European countries, forcing refrigeration and freezer units to overheat and prompting retailers to discard perishable goods. The incidents have sparked alarm among EU officials, who warn that the attacks could be part of a deliberate effort to undermine the continent’s food supply chain.
What happened?
Supermarkets in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, Germany and Sweden reported that the temperatures of their refrigerators and freezers rose dramatically, in some cases reaching 50 °C. The sudden rise in temperature rendered many frozen products unsafe for sale, leading to waste and disruption of normal store operations.
Geographic scope
- Belgium – dozens of stores reported refrigeration failures; federal prosecutors have opened an investigation.
- Estonia – at least one supermarket saw freezer temperatures climb to 50 °C, according to public broadcaster ERR.
- Finland – a few smaller grocery stores belonging to the Kesko group detected irregular temperatures.
- Ireland – 13 SuperValu stores were impacted; replenishment of chilled and frozen ranges is under way.
- Italy – four Co‑op supermarkets in Sicily and one business in Tuscany were affected; the government called a meeting with intelligence chiefs.
- Luxembourg – reported incidents, though details remain limited.
- Netherlands – a small number of corner shops suffered disruption; a separate attack on Albert Heijn last month had already taken services offline.
- Portugal – seven Intermarché stores linked to an external service provider responsible for refrigeration management.
- Germany – the Rewe Büsken supermarket in western Germany experienced disruption after a cyber‑attack on system provider Danfoss.
- Sweden – ICA reported a limited number of stores with refrigeration problems, without confirming a cyber‑attack.
Impact on the food supply
The temperature spikes forced retailers to discard food, echoing a similar incident three weeks earlier that hit up to 700 French grocery stores and caused losses estimated in the tens of millions of euros. As supermarket manager Mathieu Tilman of Delhaize in Belgium lamented, “I don’t even understand how anyone could do this… How can we end up throwing away so much food? I find it truly distressing.”
Official response
EU food and agriculture commissioner Christophe Hansen said the bloc was taking the incidents “very seriously” and warned of further disruption. Commission spokesman Thomas Regnier emphasized that the events illustrate how cyber‑attacks can affect essential services and citizens’ daily lives. In Italy, Prime Minister Giorgia Meloni’s government convened intelligence chiefs, noting that most of the food distribution chain has up‑to‑date security systems, though some affected businesses still use “obsolete security systems, with interfaces directly exposed to the internet and inadequate authentication mechanisms.”
In the United Kingdom, the National Cyber Security Centre (NCSC) urged retailers to update software on fridge temperature controls, noting that vulnerable technology has already been exploited in a few instances. NCSC head Richard Horne warned that an AI‑powered cyber‑attack on critical national infrastructure is likely within two years.
Broader implications
The attacks raise concerns about the security of remotely monitored devices, especially those that control critical infrastructure such as refrigeration. Analysts fear that if hackers can commandeer supermarket freezers, other sectors relying on similar IoT (Internet of Things) technology could be at risk. The EU’s heightened focus on “government‑backed hybrid attacks” reflects a growing awareness that cyber‑operations may be used to achieve strategic economic or political objectives.
Uncertainty and next steps
While the attacks appear to be coordinated, the exact perpetrators and motives remain unclear. The EU and national authorities have opened investigations, but concrete attribution has not yet been made. Ongoing monitoring by national cyber‑security agencies, particularly in Sweden and the Netherlands, will determine whether the incidents are isolated or part of a larger campaign.
In the meantime, consumers may notice temporary shortages or higher prices as supermarkets work to replace spoiled stock and reinforce their digital defenses.
