Cyberattack on supermarket fridges sweeps across Europe, spoiling food in stores

Stores report refrigeration disruption

The attack affected supermarkets from Sweden to Belgium on Monday, with stores reporting problems in their fridge and freezer systems and throwing away food. At an ICA franchise in Stockholm, sales manager Engla Ingwall told Reuters, “Everything is destroyed.” ICA said a limited number of its stores experienced an overnight incident affecting refrigeration and freezer systems. Ingwall said the attack took place at 2 a.m. but was not noticed until hours later.

Officials assess wider risks

No one has taken responsibility for the attacks in Europe or France. Katrien Eggers, spokesperson for Belgium’s Centre for Cybersecurity, said the perpetrator might never be identified and expressed concern about a rising number of incidents, partly linked to AI.

The European Commission said the latest incidents show digital threats are becoming more disruptive. The attacks have also sharpened European authorities’ concerns about hybrid threats to infrastructure amid heightened security tensions since Russia’s 2022 invasion of Ukraine.

Danfoss systems in focus

At least some refrigeration units affected on Monday used temperature-control technology made by Danish company Danfoss, which was also targeted in France. Danfoss said it was working with customers on fixes.

After a cybersecurity firm outlined a potential vulnerability in Danfoss systems over the summer, the company issued a patch and urged customers to install it. The flaw could allow hackers to access fridges and alter their temperatures remotely.

Earlier attacks and possible motives

Colruyt Group, which runs Spar stores in Belgium through a franchise system, said five shops had their fridge systems attacked. The French incident had affected hundreds of supermarkets, according to a report referenced in the article, and caused food losses and fires at several stores.

Cybersecurity researcher Tom Hegel said attacks of this kind are commonly associated with extortion, political motives or nation-state operations. The lack of financial demands in the recent cases points instead toward sabotage, he said.