Supermarkets across Europe hit by cyberattacks targeting refrigeration systems
AMSTERDAM/BRUSSELS/STOCKHOLM/OSLO — A series of cyberattacks have targeted refrigeration and freezer systems at supermarkets across Europe, potentially compromising food safety and forcing the removal of chilled products from sale. The incidents, confirmed across multiple countries over the past several days, highlight growing security vulnerabilities as more operational technology devices become remotely monitored and controlled.
Ahold Delhaize, the Dutch supermarket chain, confirmed an IT incident affecting refrigeration systems in a number of its stores on Monday. Stephan Moelans, CEO of Sabcobel, which operates Delhaize’s systems, told the Belga news agency the incident was a cyberattack in which the units’ evaporators were switched to defrost mode.
In Belgium, Colruyt Group said five Spar franchise shops had their fridge systems attacked, while Carrefour stated a cyberattack targeting refrigeration installations had an extremely limited impact, affecting 15 of its more than 700 stores. ICA, Sweden’s grocery retailer chain, told NBC News its systems were not affected but was supporting stores using an external supplier with external connectivity. The ICA Kvantum branch in Sjöbo posted on Facebook that its fridges and freezers had been hacked and set to 122 degrees Fahrenheit, saying it was working to discard affected items. Coop told Swedish daily Aftonbladet that six of its stores had been affected by similar incidents.
In Ireland, Musgrave said a cyber incident affected refrigeration systems in 13 of its SuperValu stores, forcing it to remove some chilled and frozen products from sale. The company said its monitoring systems alerted it to the issue and it took immediate action, adding its investigation was ongoing.
In Estonia, a company that makes the affected technology reported one client had been hit by a cyberattack in which attackers accessed a computer controlling refrigeration and turned up the temperature to 122 degrees Fahrenheit, according to public broadcaster ERR.
Sweden’s national cybersecurity center said it was working on several incidents affecting grocery stores across the country. John Billow, head of the center, said they had identified many exposed operational technology devices in recent weeks that needed updating or patching. The center could not speculate on who was behind the attacks.
The incidents underscore how an expanding range of devices — from refrigerators and heating systems to security cameras and alarm networks — can now be monitored and controlled remotely, creating new opportunities for cybercriminals. Authorities across the affected countries are working to assess the scope of the incidents and secure the affected systems.
