Europe's Fridge Hack Disrupts Food Supply

A cyberattack disrupted refrigeration systems at supermarkets across Europe on Monday, raising temperatures in freezers and fridges from Sweden to Belgium. The incident forced stores to remove spoiled food from shelves, mirroring a similar attack on French retailers last month. The breach affected major grocery chains, including Ahold Delhaize, Colruyt, ICA, and Coop, as well as at least one Ikea location.

The problem first emerged in the early hours of Monday morning. Engla Ingwall, a sales manager for an ICA franchise in Stockholm, reported that the attack began at 2 a.m. However, staff did not notice the issue until hours later. By the time the problem was identified, all freezers in her store had reached 50 degrees Celsius. Ingwall described the situation as total destruction, noting that the temperature control systems had been compromised.

This incident follows a pattern of targeted strikes on European retail infrastructure. Last month, hackers seized control of cooling units at hundreds of supermarkets in France, leading to fires and significant food losses. Ahold Delhaize also reported a cybersecurity incident to police in Belgium and Luxembourg during that same period. No group has claimed responsibility for either the French or the latest European attacks, leaving authorities to investigate the motive and origin.

The technical vulnerability appears linked to temperature control technology made by Danish firm Danfoss. The company stated that affected units were running outdated firmware or had reached the end of their support life. Danfoss released a patch over the summer after a cybersecurity firm identified a potential vulnerability that allowed remote access to fridge controls. The firm is now working with customers to implement fixes.

Katrien Eggers, a spokesperson for Belgium's Centre for Cybersecurity, expressed concern about the growing frequency of such incidents. She noted that artificial intelligence allows sophisticated actors to exploit weaknesses in IT systems more effectively. Eggers said it remains unknown who is behind the attack, and that determination may never be possible.

The financial and operational impact varies by retailer. In Belgium, Colruyt Group reported that five of its shops were affected. Carrefour said 15 of its 700 stores in the country experienced issues. In Ireland, wholesaler Musgrave stated that the incident affected systems in 13 SuperValu stores, forcing the removal of chilled and frozen products. In Sweden, Coop said seven of its 800 stores were hit by unauthorized tampering.

Local business owners have reported substantial losses. Luc De Laet, owner of a butchery chain in Belgium, was alerted to the problem at 3:30 a.m. He found his fridges set to 18 degrees Celsius and estimated the incident ruined 15,000 euros worth of meat. De Laet believes the hackers aim to destabilize European economies and has called on authorities to act.

Analysts suggest these attacks are likely acts of sabotage rather than extortion, given the lack of financial demands. Tom Hegel, a researcher at SentinelOne, noted that retail is an easy target due to the large number of connected control panels. He added that it is difficult to trace hackers targeting such systems because they leave minimal digital footprints.