Cyberattacks disrupt supermarket refrigeration systems across Europe, causing food spoilage and supply chain risks

Consensus Summary

A coordinated cyberattack has disrupted refrigeration systems in supermarkets across Europe, with hackers remotely raising temperatures in fridges and freezers to as high as 50C (122F). The incidents, reported by chains including Ahold Delhaize, ICA, Coop, and Carrefour, affected stores in Belgium, Luxembourg, Sweden, Estonia, Ireland, and the Netherlands. The Guardian, ABC, and 7NEWS all confirm that dozens of supermarkets—including five Spar outlets and smaller Proxy Delhaize mini-markets—were impacted, leading to food spoilage and operational disruptions. The attacks followed a similar incident in France last month, where hackers targeted hundreds of supermarkets, causing fires and losses estimated in the tens of millions of euros. The EU’s food commissioner, Christophe Hansen, condemned the attacks as a deliberate attempt to undermine consumer confidence in the food supply chain.

The cyberattacks exploit vulnerabilities in operational technology devices, many of which remain exposed and unpatched despite known security flaws. The Guardian reports that Sweden’s national cybersecurity centre identified a significant number of exposed devices in recent weeks, while ABC and 7NEWS highlight that refrigeration controllers—particularly those supplied by Danfoss—were targeted in the French attack. Experts cited by the outlets warn that such systems are easy targets for hackers due to their widespread use and often outdated security measures. The attacks occurred overnight, with incidents reported as early as 1am and 2am local time, catching retailers off guard and forcing them to disconnect affected systems manually. The Guardian notes that the French attack was investigated by authorities, but no responsible party has been identified.

Key figures in the response include Stephan Moelans, CEO of Sabcobel, who confirmed the Belgian incidents were cyberattacks and described technicians working all night to disconnect affected units. The Guardian quotes John Billow, head of Sweden’s national cybersecurity centre, emphasizing the need to update exposed devices, while ABC and 7NEWS relay similar concerns from European authorities. In Belgium, Luc De Laet, owner of a butchery chain, reported €15,000 ($A24,000) in losses after fridges were turned to 18 degrees, calling the attack an attempt to destabilise economies. The Guardian also highlights the impact on smaller retailers, including 17 Dutch shops and Finland’s Kesko chain, though these details are less emphasized in ABC and 7NEWS.

While the core narrative aligns across sources, discrepancies emerge in specific details. The Guardian and ABC agree that the French attack affected hundreds of supermarkets, but the Guardian also cites a broader range of up to 700 stores, a figure not repeated by ABC or 7NEWS. The Guardian provides more technical context, such as the involvement of Danfoss controllers and the mention of Russia’s 2022 invasion as a potential geopolitical backdrop, which ABC and 7NEWS omit. Additionally, the Guardian includes quotes from cybersecurity experts like Patrick Lamplmair, while ABC and 7NEWS focus more on the immediate operational fallout. The timing of the Belgian incidents is also framed differently: the Guardian and 7NEWS describe them as occurring 'last month,' while ABC does not specify a date beyond 'last month’s incidents.'

The unresolved questions center on the attackers’ motives and identity, as no group has claimed responsibility. The Guardian notes that the lack of financial demands suggests sabotage rather than extortion, while ABC and 7NEWS emphasize the potential for state-level actors given the scale and method of the attacks. Authorities, including France’s national cybersecurity agency, are investigating, but the Guardian reports no progress in identifying perpetrators. Retailers are prioritising damage control, with the Guardian and ABC both highlighting efforts to restore refrigeration systems and prevent further spoilage. The long-term risk, as warned by experts, is that such attacks could become more frequent if vulnerabilities in operational technology remain unaddressed, posing ongoing threats to Europe’s food supply infrastructure.