Cyber attacks targeting supermarket refrigeration systems have disrupted stores across at least five European countries, raising concerns about the vulnerability of operational technology and the potential for cyber incidents to cause physical damage and business interruption. Incidents affected refrigeration and freezer equipment have been reported in Sweden, Belgium, Luxembourg, Ireland and Estonia.

In several cases, temperatures rose sharply after the settings of remotely controlled systems were altered, forcing retailers to remove chilled and frozen food from sale.

In Ireland, food wholesaler and distributor Musgrave confirmed that a cyber incident had affected a specific model of refrigeration equipment at 13 SuperValu stores. Chilled and frozen products were withdrawn as a precaution, while the company said its stores remained open and other products were available as normal. It said it is working with equipment suppliers and cybersecurity specialists to resolve the issue.

In Belgium and Luxembourg, Ahold Delhaize reported an IT incident affecting refrigeration systems in several dozen stores. Carrefour Belgium said 15 of its more than 700 stores had experienced limited disruption, with measures taken to keep all outlets open. Colruyt stores were also reported to have been affected.

In Sweden, supermarket groups ICA and Coop reported problems with refrigeration and freezer systems. Coop said six stores were affected, while ICA described the number of impacted locations as limited. One ICA store reported that freezer temperatures had been raised to 50°C, resulting in food being discarded.

An outlet of Estonian supermarket chain Selver was also affected after attackers accessed a computer controlling its refrigeration equipment and raised the temperature setting. The incident was reportedly contained quickly, with no significant stock losses.

The incidents follow a larger attack in France in October, when hackers manipulated refrigeration controls at hundreds of supermarkets, causing food losses and fires. The attacks involved internet-connected systems used to monitor and manage refrigeration equipment remotely. The precise relationship between the latest incidents and the earlier French attacks has not been established, and no group has yet claimed responsibility.

---