Multiple European supermarket chains experienced disruptions to their refrigeration systems due to a series of computer incidents affecting locations in Belgium, Luxembourg, Sweden, Ireland, and Estonia, highlighting concerns about the potential vulnerabilities of critical internet-connected infrastructure.
Ahold Delhaize's Delhaize chain in Belgium and Luxembourg reported disruptions to approximately 40 stores due to issues with their refrigeration systems early in the morning. The company attributed the problem to a "computer incident" and stated that its technical teams are actively investigating the situation to assess the full impact of the incident.
Reports from Belgian media indicate that disruptions to refrigeration systems began in the early hours of the morning, resulting in some freezers reaching temperatures near 15 degrees Celsius. In response, several supermarkets utilized refrigerated trucks to maintain product integrity, while others were forced to discard perishable items due to the breakdown of the cold chain.
Sabcobel, a refrigeration company that services Delhaize, activated its technicians early in the morning after identifying a dozen malfunctioning systems. According to Stephan Moelans, the company's chief executive, the evaporators in question were set to an unfreezing mode, a configuration that is consistent with a potential cyberattack.
In addition to the initial reports, other entities have been impacted by the issue. Specifically, Carrefour Belgium experienced problems in 15 of its establishments, mirroring similar incidents at Spar stores and several slaughterhouses in Antwerp.
In Sweden, ICA and Coop supermarkets have experienced disruptions to their cooling systems. An ICA store announced on social media that its refrigerators and freezers had malfunctioned, with temperatures rising to 50 degrees Celsius, prompting the store to temporarily suspend operations.
The Swedish National Cyber Security Center has launched an investigation into several incidents involving supermarket cooling systems in the country. Authorities, led by Director John Billow, have identified a significant number of operational technology devices exposed to the internet without receiving necessary security updates in recent weeks.
Musgrave, the owner of SuperValu, has confirmed that 13 of its supermarkets in Ireland experienced a cyber attack incident, resulting in the temporary removal of refrigerated and frozen products from sale.
A recent incident in Estonia involved a supermarket chain whose cooling systems were remotely manipulated, resulting in an abnormal temperature increase to 50 degrees Celsius. The affected company was not disclosed by Kitman Coldtech, a technology firm that reported the incident.
Recent cyber incidents have unfolded in the aftermath of a significant attack in October, which had far-reaching consequences in France, as well as in neighboring countries Belgium and the Netherlands. In that earlier incident, hackers successfully compromised the refrigeration systems of hundreds of supermarkets, resulting in elevated temperatures that led to fires, equipment damage and substantial food losses.
At this point, no official statement has been issued identifying those behind the incidents, nor has any individual or group claimed responsibility.
The recent attacks underscore the escalating vulnerabilities linked to the digital transformation of conventional equipment, including industrial refrigeration systems, heating systems, security cameras, and alarm networks.
The increased capability to monitor and control devices remotely enhances operational efficiency, however, it also widens the potential attack surface for cybercriminals.
Ongoing investigations in multiple countries aim to establish whether recent incidents are connected to a larger-scale attack targeting the European retail industry.
The information has been updated at 16:17 Central European Time.
