Cyberattacks Hit Supermarket Freezers Across Seven European Nations
Remote-access intrusions alter industrial refrigeration settings, spoiling millions in groceries across seven European countries.
- By Jesse Jacobs
- Nov 02, 2026
A cyberattack on commercial refrigeration systems disrupted grocery retailers across seven European countries, forcing operators to throw away ruined food after temperatures inside cooling units rose to 122 degrees Fahrenheit (50 degrees Celsius), according to reporting by the BBC and insurance market intelligence platform Beinsure.
Both outlets reported that the intrusions impacted grocers in Belgium, Luxembourg, Sweden, Finland, Ireland, Estonia and the Netherlands after attackers tampered with refrigeration controls to trigger system defrost cycles.
The BBC detailed that roughly 40 Delhaize supermarkets in Belgium and Luxembourg suffered disruptions, alongside 15 Carrefour locations and five Spar franchise shops run by Colruyt Group. The broadcaster also noted that a Delhaize location in Hoeilaart estimated 100,000 euros ($83,500) in lost inventory, excluding revenue lost to store closures, while an Ikea location in Mons, Belgium, also sustained refrigeration tampering.
Beinsure expanded on the Belgian impact, reporting that technical problems struck 15 Intermarché supermarkets, Proxy Delhaize outlets and Shop & Go convenience locations at Q8 fuel stations. The trade publication also reported that Ahold Delhaize confirmed distribution centers continued operating normally, and that Ikea personnel cleared out food as a precaution across the affected units.
Refrigeration installer Sabcobel told the BBC that technicians worked through the night to sever network connections to the affected hardware. The manufacturer noted to both the BBC and Beinsure that protecting vulnerable equipment against this specific threat requires physical hardware modifications rather than remote software updates alone.
The BBC reported that Sweden’s Coop identified breaches at seven locations, while an ICA location in Sjöbo stated that hackers adjusted equipment to 50 degrees Celsius overnight. Beinsure added that an ICA branch in Stockholm suffered an intrusion at approximately 2 a.m., quoting John Billow, head of Sweden's National Cybersecurity Centre, as stating investigators identified "quite a lot of exposed operational technology devices" requiring security updates or patches.
In other affected countries, the BBC documented that 13 SuperValu stores operated by Musgrave Group sustained disruptions in Ireland, Danish equipment maker Danfoss confirmed attacks on cooling units across at least 17 Dutch businesses, Finnish chain Kesko initiated inquiries into K-store failures and Selver supermarkets reported issues in Estonia. Beinsure cited Dutch public broadcaster NOS regarding the Netherlands disruptions and noted that affected Dutch sites included butcher shops and small neighbourhood grocers.
Both news organizations highlighted that the incident closely mirrors an earlier wave of intrusions in France, but Beinsure reported that the French event compromised up to 700 supermarkets—including Intermarché and Coopérative U locations—causing tens of millions of euros in damaged food and isolated fires.
The BBC and Beinsure stated that cybersecurity agencies in Belgium, Sweden and the United Kingdom are assessing the incidents alongside international partners. Both sources added that U.S. authorities are reviewing whether similar refrigeration failures at American military bases bear any connection to the European retail disruptions.