A widespread cyber-attack has disrupted refrigeration systems in dozens of supermarkets across seven European nations, leading to significant food spoilage and potential financial losses. The incident, which appears to target the temperature control mechanisms of refrigerators and freezers, has affected numerous stores in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland.

In Belgium, approximately 40 Delhaize supermarkets experienced disruptions, with one branch in Hoeilaart reportedly losing €100,000 worth of produce. Sabcobel, a manufacturer of some of the affected units, confirmed the attack involved units being switched to defrost mode, causing temperatures to rise. This mirrors a similar incident in October that impacted hundreds of French supermarkets, resulting in millions of euros in food waste. Stephan Moelans, CEO of Sabcobel, stated that while the company had been working to protect against such vulnerabilities since the French attack, physical modifications, not just software updates, are necessary.

Across other affected countries, the impact has been varied but significant. In Sweden, several ICA grocery stores were forced to discard food, with one Stockholm branch reporting freezers set to 50 degrees Celsius. Seven Coop stores in Sweden also reported issues, though the company stated the situation is contained. Ireland saw 13 SuperValu supermarkets affected, with the impact limited to a specific refrigerator model. Reports from the Netherlands indicate at least 17 companies, including butcher shops and small stores, were targeted, while a Selver supermarket in Estonia also fell victim. The full extent of the financial damage is still being assessed, but early estimates suggest substantial losses.

Authorities in Belgium and Sweden are actively monitoring the situation, with their national cyber-security agencies engaged. International partners, including the UK’s National Cyber Security Centre, are collaborating to understand the full scope of the attack. Investigations are also underway in the US into similar refrigeration malfunctions at military bases, with officials examining potential links to the European incidents. The perpetrators behind this coordinated cyber-assault remain unknown, raising concerns about the vulnerability of critical infrastructure to such sophisticated attacks.

Key Takeaways

• Dozens of supermarkets across seven European countries have been hit by a cyber-attack targeting refrigeration systems.
• The attack has led to significant food spoilage and financial losses, with one Belgian store estimating €100,000 in lost produce.
• This incident is similar to a previous attack in France and highlights vulnerabilities in connected retail infrastructure, prompting international investigations.

Editor’s Analysis & Impact

This cyber-attack on supermarket refrigeration systems underscores a growing threat to critical retail infrastructure. The reliance on interconnected devices, while offering efficiency benefits like remote management, also presents significant security risks. The repeated nature of these attacks, mirroring the incident in France, suggests a sophisticated and potentially evolving threat actor. The financial implications, extending beyond immediate food spoilage to potential business disruption and reputational damage, are substantial. This event will likely accelerate investments in enhanced cybersecurity measures and physical security for IoT devices within the retail sector, potentially leading to stricter industry standards and a re-evaluation of remote access protocols for essential equipment.

Frequently Asked Questions

Q: What exactly happened to the refrigerators and freezers?
A: The cyber-attack reportedly manipulated the units' control systems, switching them into defrost mode and causing internal temperatures to rise significantly, leading to food spoilage.

Q: Which countries and supermarket chains were affected?
A: The attack impacted supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland. Affected chains include Delhaize, ICA, Coop, SuperValu, and some smaller independent stores and butcher shops.

Q: Is there a known link to the previous French supermarket cyber-attack?
A: Yes, the method used in this attack is believed to be the same as a previous incident that hit hundreds of French supermarkets in October, suggesting a potential connection or shared modus operandi.