Widespread Cyberattacks Disrupt Supermarket Refrigeration Across Europe, Highlighting Vulnerabilities

Supermarkets across multiple European countries are grappling with a wave of cyberattacks targeting their refrigeration and freezer systems, resulting in widespread disruptions and food spoilage. This series of attacks began in France about three weeks ago, where hundreds of refrigeration units at major retailers were remotely disabled, forcing the disposal of perishable goods and raising serious food safety concerns.

The attacks have since spread to Belgium, Sweden, Italy, the Netherlands, Ireland, Estonia, Finland, Luxembourg, and Portugal. In Belgium, for example, Carrefour experienced issues in 15 of its 700 stores, and Ikea’s Mons location was also affected. Other Belgian retailers like Delhaize and Colruyt reported refrigeration disruptions. Italy’s Coop supermarkets saw impacts in at least four stores, while Sweden’s Coop reported similar problems in six outlets.

These attacks exploit known vulnerabilities in refrigeration equipment that have either not been patched by manufacturers or remain unupdated by supermarket operators. Danfoss, a key manufacturer of refrigeration units implicated in these incidents, has faced criticism for supplying outdated equipment that may have contributed to the vulnerabilities. Some equipment was reportedly manipulated to reach temperatures as high as 50°C. Experts warn that resolving these issues will require extensive time and resources, including potentially replacing or physically updating compromised devices.

European Commissioner for Agriculture Christophe Hansen condemned the assaults as deliberate attempts to destabilize the food supply chain and undermine consumer trust. Belgian federal prosecutors have opened an investigation, though the incident has not yet been officially classified as a cyberattack. Additionally, French authorities are probing into the possibility that similar cyber-related issues have affected U.S. military equipment.

The Belgian refrigeration group Sabcobel noted that about 10% of its systems remained unsecured following the French incidents, highlighting ongoing vulnerabilities in critical infrastructure. The cyberattacks emphasize growing cybersecurity challenges within the European food supply chains, signaling a need for enhanced protection measures to prevent further disruptions and safeguard public safety.