Another cyberattack on supermarket fridges sweeps Europe, leaving food spoiled

Supermarkets in Europe are grappling with a cybersecurity crisis after suspected hackers remotely manipulated refrigeration systems, causing temperatures to skyrocket and forcing retailers to discard significant amounts of food. The latest incidents were reported in Sweden, but have since spread to Belgium, Luxembourg, Ireland, and Estonia, affecting several major supermarket chains.

The attacks follow a similar incident in France last month, when hundreds of stores experienced refrigeration failures after their cooling systems were compromised. This recent wave of incidents has raised concerns about the security of supermarket equipment connected to the internet, particularly systems that enable remote monitoring and control of refrigeration units.

In Sweden, supermarket chains ICA and Coop confirmed incidents affecting refrigeration equipment, with temperatures in some units reaching 50°C. One ICA store in Stockholm had to remove spoiled stock due to an overnight incident. Sweden's National Cybersecurity Centre is investigating several refrigeration system issues and has warned about the need for security updates and patches on exposed operational technology devices.

Belgium has also faced serious disruption, with around 40 Delhaize stores hit by an IT incident involving refrigeration systems. Carrefour Belgium reported that 15 of its 700+ stores experienced problems, while Spar supermarkets operated by the Colruyt Group also reported attacks on refrigeration equipment. Luxembourg's Delhaize stores also experienced refrigeration problems, with technicians called out overnight to disconnect affected equipment.

Ireland joined the list of affected countries after SuperValu confirmed refrigeration equipment at 13 of its 223 stores was affected. Musgrave, SuperValu's parent company, said chilled and frozen products were removed from sale as a precaution, but stores remained open. The company is working with equipment suppliers and cybersecurity specialists to investigate the incident.

In Estonia, a supermarket refrigeration system was accessed remotely, and its temperature settings were raised to 50°C. Technology supplier Kitman Coldtech confirmed that one of its customers was affected. Selver, a supermarket chain in Estonia, reported a similar incident, with the problem reportedly resolved within minutes by disconnecting fridges from the internet.

While no Spanish supermarket refrigeration systems have been confirmed as targeted, the growing number of incidents is likely to raise concerns among retailers in Spain. Spain's National Cybersecurity Institute (INCIBE) is providing advice on digital security incidents, and the Spanish Interior Ministry's Cybersecurity Coordination Office offers guidance on protecting connected and industrial equipment.

Despite the increasing number of incidents, authorities have yet to identify the responsible parties, with no group claiming responsibility and no obvious ransom demands. The absence of clear motives has raised questions about whether the attacks are financially motivated or intended for deliberate disruption. The incidents highlight the potential security weaknesses of electronically monitored refrigeration systems and the vulnerability of essential food supplies when connected to the internet.