European Supermarkets Hit by Widespread Cyberattacks on Refrigeration Systems

A wave of cyberattacks has struck supermarket refrigeration systems in six European countries, causing temperatures to soar and resulting in millions of euros worth of food being discarded. The affected nations include Belgium, Sweden, Luxembourg, Ireland, the Netherlands, and Estonia, with reports indicating that the issue extended beyond just Sweden and Belgium, impacting a broader range of retailers and smaller businesses.

In Sweden, six Coop stores faced issues, while ICA confirmed a 'small number' of its stores outside the central network were also affected. The problem was particularly acute in some freezers where temperatures reached as high as 50C (122F), forcing the evacuation of perishable goods. In Ireland, 13 SuperValu supermarkets were impacted, and in the Netherlands, at least 17 companies, including butcher shops and local stores, saw their freezing and cooling systems compromised.

The attack's mechanism involved the activation of the defrost mode in refrigerators, which warmed the units significantly. This was confirmed by Delhaize in Belgium, where the issue was traced back to the malfunctioning of evaporators during the cyberattack. Additionally, the Danish company Danfoss and American firm Copeland, both manufacturers of refrigeration components, were reportedly targeted in the attacks.

In Estonia, a Selver supermarket was among the affected locations, while in Belgium, Carrefour reported that only 15 of its stores were impacted. Other Belgian chains such as Spar, Shop & Go, and Proxy Delhaize also suffered from the temperature spikes, with five Spar stores operated by Colruyt Group experiencing disruptions to their fridge systems.

The scale of the disruption underscores the interconnectedness of modern retail infrastructure and highlights the potential for widespread impact from cyber incidents. While the exact nature and origin of the attacks remain under investigation, the event serves as a reminder of the critical role technology plays in maintaining the cold chain essential for food safety and freshness.

What We Know

• Supermarket freezers and refrigerators in six European countries were affected by a suspected cyber-attack. ¹²³⁴⁵⁶
• The affected countries included Belgium, Sweden, Luxembourg, Ireland, the Netherlands, and Estonia. ¹²³⁴⁵⁶
• Six Coop stores in Sweden were affected. ²³⁴⁵⁶
• Temperatures in some affected freezers rose to as high as 50C (122F). ¹³⁴⁵⁶
• ICA confirmed a 'small number' of its stores outside the central network were affected in Sweden. ¹³
• The attack caused the evaporators in the refrigerators to switch to defrost mode, warming the units up. ¹⁴
• In Ireland, 13 SuperValu supermarkets were impacted. ¹
• At least 17 companies in the Netherlands, including butcher shops and small neighborhood stores, had their freezing and cooling systems attacked. ¹
• A Selver supermarket in Estonia was affected by the attack. ¹
• Millions of euros worth of food had to be discarded due to the incident. ¹
• Carrefour reported that only 15 of its Belgian stores were affected. ¹
• Spar, Shop & Go, and Proxy Delhaize stores were affected in Belgium. ²
• Delhaize's refrigeration issue was caused by switching evaporators to defrost mode during a cyberattack. ⁴
• Ikea Belgium experienced a temperature spike in its store in Mons due to a cyberattack. ⁴
• Five Spar stores operated by Colruyt Group had their fridge systems attacked. ⁴
• Danfoss and Copeland equipment were targeted in the attacks. ⁶