Cyber attacks raise supermarket freezer temperatures across Europe

Cyber attacks on Monday, November 2, 2026, raised temperatures in supermarket freezers and refrigerators across at least ten European countries. Stores in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, Germany and Sweden reported units climbing as high as 50 to 55 degrees Celsius. Retailers discarded large quantities of chilled and frozen food. The incidents followed a similar wave in France three weeks earlier that affected up to 700 stores and caused losses estimated in the tens of millions of euros.

EU officials described the attacks as a deliberate attempt to disrupt the food supply chain and undermine consumer confidence. No group has claimed responsibility. Investigators note that the method used known vulnerabilities in internet-exposed remote controllers for refrigeration systems. Suppliers such as Danfoss had previously advised customers to update hardware and software after the French incidents. Some units were switched to defrost mode, causing rapid warming. Stores using secure connections were less affected.

In Ireland, 13 SuperValu stores owned by the Musgrave Group reported problems. In Belgium and Luxembourg, dozens of Delhaize outlets and some Carrefour, Spar and Intermarché locations were hit. Swedish chains ICA and Coop, Finnish Kesko and a small number of Dutch and Estonian shops also saw disruptions. One Belgian Delhaize manager estimated losses of 100,000 euros at a single branch before accounting for temporary closure. Staff filled trolleys with unsellable products and posted notices that freezers were out of use.

The attacks required relatively low technical sophistication once controllers were reachable online. National cybersecurity centres in several countries opened investigations. The European Commission contacted member-state authorities and convened a task force. Retailers began replenishing stock where possible, but the volume of discarded food created immediate waste and short-term shortages of frozen goods in affected outlets. The pattern of successive waves suggests the vulnerability remains widespread among older control systems.

Observers have speculated about possible state-linked actors given the scale and the psychological effect of empty freezer aisles, though no evidence has publicly identified a perpetrator. Ransomware groups have not issued demands, as the damage occurs before any payment negotiation. The incidents highlight the exposure of operational technology in retail. Many refrigeration controllers were installed years ago with remote access enabled for maintenance and never fully secured. Patching and network segmentation reduce risk, yet widespread adoption takes time.

Food retailers now face both financial losses and questions about the resilience of cold-chain systems. Consumers in affected cities saw empty shelves and higher short-term prices for remaining stock. Further waves remain possible until the remaining vulnerable units are isolated or updated. The EU has signalled that supply-chain security for everyday goods is now a priority for cybersecurity policy. The latest attacks show how a simple temperature change, executed at scale, can destroy inventory and disrupt retail operations across multiple countries in a single night.