Supermarket fridges hacked overnight

What's happened

Supermarket refrigeration systems in Sweden, Belgium, Luxembourg and Estonia have been tampered with overnight, causing temperatures to spike to about 50°C in dozens of stores. Chains including ICA, Coop and Ahold Delhaize have reported IT or cyber incidents and are investigating; some stores have discarded spoiled stock and technicians are isolating affected units.

What's behind the headline?

What happened and why it matters

Multiple supermarket chains have reported that refrigeration controls were accessed and their temperatures were raised to roughly 50°C. This repeats the pattern of an October attack on French stores and shows that networked industrial controllers remain a practical target. The disruption has immediate commercial costs and will force tighter controls on food-supply resilience.

Technical and operational fault lines

• Remote-management interfaces on chillers and freezers give operators convenience; they also give attackers a remote control path. Reports point to older controllers and incomplete patching as weak links.
• Attackers have shown the capability to alter thermostat and defrost cycles, override alarms and force prolonged warm states. That profile will make insurers, suppliers and retailers re-evaluate who holds operational responsibility.

Likely short-term consequences

• Supermarkets will isolate and disconnect affected controllers and discard perished goods, creating immediate stock shortages for fresh and frozen items in affected stores.
• Retailers will accelerate firmware updates, network segmentation and emergency response playbooks; suppliers of the affected controllers will face urgent scrutiny and claims.

Medium-term policy and market effects

• Regulators will require stronger cyber-hygiene for critical cold‑chain equipment and mandatory incident reporting. This will increase compliance costs for smaller stores that use third‑party or legacy controllers.
• Manufacturers of refrigeration controls will face pressure to ship secure-by-default devices and to support patching programs; procurement decisions will shift toward vendors with clear update policies.

Forecast

This will increase inspections and forced upgrades across European food retail. Technical fixes will reduce repeat incidents within months, but legacy systems and fragmented ownership of kit mean similar disruptions will continue unless regulators enforce minimum security standards and vendors commit to widespread firmware updates.

How we got here

Retailers have been warning about internet-connected refrigeration for months after a mid‑October attack hit hundreds of French supermarkets, forcing large-scale food disposals. Many modern cooling units allow remote maintenance and alerts; older controllers and unpatched firmware have been identified as prior vulnerabilities.

Our analysis

The coverage converges on the same facts but differs in emphasis and detail. Business Insider UK reported Coop acknowledging that "unauthorized actors were able to access and tamper with the cooling systems at a small fraction of our stores," and gave a specific figure of seven affected Coop outlets. The BBC Business piece rounded up national impact, saying "Around 40 Delhaize supermarkets and 15 Carrefour stores were affected in Belgium," and quoting an ICA branch in Sjöbo that said its freezers had been "set to 50 C (122F)" on social media. The Guardian traced the incident to a wider chain of vulnerabilities, noting that the French October attack targeted Danfoss controllers and that ANSSI opened an inquiry; the Guardian also quoted Sabcobel's CEO Stephan Moelans saying technicians were "disconnecting the affected installations from the grid." Reuters and Al Jazeera (via Reuters) provided the official confirmation tone, with Sweden's national cybersecurity centre head John Billow saying the centre "is responding to multiple incidents." Bloomberg and Belga focused on Ahold Delhaize's statement that an "IT incident" affected about 40 Delhaize stores. Together these sources show concrete local impacts (quotes from store managers and social posts about 50°C) and institutional responses (police reports, cybersecurity centres mobilising), but they stop short of confirming whether the same vulnerability from the French attack is responsible.

Go deeper

• Which refrigeration controller vendors have issued patches or alerts?
• Will national regulators mandate security standards for cold‑chain equipment?
• How will insurers handle claims for spoiled stock after such cyber incidents?

More on these topics

• Sweden - Country in Europe

  Sweden, officially the Kingdom of Sweden, is a Nordic country in Northern Europe. It borders Norway to the west and north, Finland to the east, and is connected to Denmark in the southwest by a bridge-tunnel across the Öresund Strait.

• France - Country in Europe

  France, officially the French Republic, is a country consisting of metropolitan France in Western Europe and several overseas regions and territories.

• Belgium - Country in Europe

  Belgium, officially the Kingdom of Belgium, is a country in Western Europe. It is bordered by the Netherlands to the north, Germany to the east, Luxembourg to the southeast, France to the southwest, and the North Sea to the northwest.

• Ahold Delhaize - Retail company

  Koninklijke Ahold Delhaize N.V., commonly known as Ahold Delhaize, is a Dutch grocery retail company. Its business format includes supermarkets, convenience stores, hypermarkets, online grocery, online non-food, drugstores, and liquor stores.

• Luxembourg - Country in Europe

  Luxembourg, officially the Grand Duchy of Luxembourg, is a landlocked country in Western Europe. It is bordered by Belgium to the west and north, Germany to the east, and France to the south.

• Carrefour - French hypermarket brand of the Carrefour Group

  Carrefour Group, S.A. (French: Groupe Carrefour, [kaʁfuʁ] ), is a French multinational retail and wholesaling corporation headquartered in Massy, France. It operates a chain of hypermarkets, grocery stores and convenience stores. By 2024, the group had 14,000 stores in 40 countries. It is the seventh-largest retailer in the world by revenue.

• Aftonbladet - Swedish newspaper

  Aftonbladet (Swedish: [ˈâftɔnˌblɑːdɛt], lit. "The evening paper") is a Swedish daily newspaper published in Stockholm, Sweden. It is one of the largest daily newspapers in the Nordic countries.

• Estonia - Country in Europe

  Estonia, officially the Republic of Estonia, is a country on the eastern coast of the Baltic Sea in Northern Europe. It is bordered to the north by the Gulf of Finland across from Finland, to the west by the Baltic Sea across from Sweden, to the south by