Suspected Cyber Attacks Disrupt Supermarket Refrigeration Systems Across Europe
Incidents in seven European nations have compromised commercial freezers and forced the disposal of compromised food products.
Refrigeration systems at supermarkets and other food businesses were disrupted by suspected cyber incidents across several European countries overnight on November 2, 2026. Retailers and suppliers reported affected locations in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, and Estonia, while similar malfunctions in Finland remained under investigation. Authorities have not yet identified an attacker or established a definitive link to an earlier supermarket attack in France.
The European Commission qualified the widespread incidents as a deliberate attempt to disrupt food supplies in the region. European Commissioner for Agriculture and Food Christoph Hansen stated that the actions represent a deliberate attempt to undermine the food supply chain and consumer confidence, noting that the losses amount to millions of euros for affected businesses.
The disruptions impacted major chains and independent stores differently depending on the region. In Sweden, franchise stores and major chains such as ICA and Coop confirmed incidents at a limited number of locations, with one Stockholm franchise reporting that its freezers reached temperatures of 50 degrees Celsius. In Belgium and Luxembourg, reports indicated that around 40 Delhaize stores were affected, alongside 15 Carrefour locations.
Irish wholesaler Musgrave reported that 13 SuperValu stores experienced issues involving a specific refrigeration model, though operations had largely returned to normal by Monday evening. In the Netherlands, refrigeration supplier Danfoss stated that at least 17 businesses, including butcher shops and small neighborhood stores, were impacted. Estonia reported an issue at a single Selver outlet where staff responded quickly to prevent product damage.
Refrigeration operators and industry experts explained that attackers manipulated digital controls to switch evaporators into defrost mode, causing internal temperatures to rise significantly. Stephane Moelans, CEO of the Belgian refrigeration company Sabcobel, noted that affected installations were disconnected from the network overnight and through the morning to halt the tampering.
Retailers across the affected nations were forced to discard chilled and frozen goods as a precaution, resulting in substantial financial losses. However, officials emphasized that despite the widespread commercial impact on enterprises and consumers, there is currently no broader threat to the overall food security of the European Union.
Large commercial refrigeration systems rely on internet and remote connectivity to allow service contractors to diagnose faults, run defrost cycles, and monitor temperatures without traveling to every physical store. Security experts note that while remote maintenance is highly useful, exposed management interfaces and unsecured remote accounts can introduce operational vulnerabilities if not properly monitored.