Suspected cyberattacks hit food refrigeration systems in eight European countries
Suspected cyberattacks targeting refrigeration systems have disrupted food businesses across eight European countries, causing food losses and prompting investigations into a possible coordinated campaign.
Incidents have been reported in Sweden, Belgium, Estonia, Finland, Luxembourg, the Netherlands, Ireland and Denmark. Supermarkets, food producers, butcher shops and storage facilities were among those affected.
Belgian prosecutors have opened a criminal investigation, while authorities and businesses in other countries are examining the incidents and their possible links.
EU Agriculture and Food Commissioner Christophe Hansen described the attacks as a deliberate attempt to disrupt European food security, according to Danish broadcaster DR.
Although he said the incidents did not threaten overall food supplies, Hansen warned that the disruption and resulting food waste had caused tangible damage to businesses. He called for coordinated action to strengthen resilience across Europe's food supply chain.
Refrigeration units remotely manipulated
In Belgium, several major supermarket chains, including Delhaize, Carrefour and Spar, reported problems.
Sabcobel CEO Stephan Moelans told Belga that the incident began around midnight on Sunday and affected approximately 20 refrigeration units managed by the installation company.
Attackers reportedly accessed the systems remotely and switched refrigeration units into defrost mode, causing temperatures to rise.
Carrefour confirmed that 15 stores across Flanders and Wallonia had been targeted. IKEA also reported an incident involving refrigeration units and freezers at its Mons store.
The financial impact was significant for some businesses. One shopkeeper estimated that at least €60,000 worth of food had to be discarded, according to Het Belang van Limburg.
Colruyt and Intermarché also reported refrigeration problems at several stores, although neither confirmed a cyberattack. Ahold Delhaize reported an IT incident affecting dozens of stores in Belgium and Luxembourg.
Swedish supermarkets forced to discard food
Sweden was among the countries reporting widespread disruption.
Several ICA stores were affected, mainly in Skåne, with additional incidents reported on Öland, in Värmland and Stockholm. Six Coop stores in Gästrikland and Hälsingland were also hit.
At an ICA Nära store in Böda, on Öland, manager Mats Olsson reported finding water across the floor and a freezer temperature reading of 55 degrees Celsius.
Refrigeration systems had reportedly been switched off, leaving food unfit for sale.
ICA said it was investigating the incident and supporting affected stores, adding that the compromised connections were outside its central network.
Coop confirmed unauthorized manipulation of its systems during a cyber incident and identified refrigeration supplier Danfoss among the companies involved.
Irish stores return to normal operations
In Ireland, a suspected cyberattack affected a specific refrigeration model used at 13 SuperValu stores, parent company Musgrave confirmed.
Monitoring systems detected the problem, prompting immediate action. Chilled and frozen products were withdrawn as a precaution, while other goods remained available.
Some stores, including the outlet in Bray, County Wicklow, opened later than usual.
Musgrave subsequently confirmed that the issue had been fully resolved, with all affected stores operating normally and restocking under way, according to RTÉ.
Dutch and Estonian businesses also targeted
In the Netherlands, at least 17 businesses were affected, including butcher shops, local stores and a frozen food storage facility, according to broadcaster NOS.
Danfoss said the affected refrigeration systems were using default passwords and were not connected to secure networks.
In Estonia, hackers reportedly accessed a computer controlling refrigeration equipment at a Selver supermarket and changed the temperature of a freezer, public broadcaster ERR reported.
Finland and Denmark investigate possible links
In Finland, several Kesko-operated stores reported unusual temperature fluctuations.
Company security chief Petri Käyhkö said the affected equipment was outside the retailer's centralized protection system and that a cyberattack had not been ruled out.
At one Helsinki store, refrigeration equipment malfunctioned for between one and two hours.
In Denmark, a food producer was also targeted, according to the Confederation of Danish Industry.
Industry adviser Jeppe Engell said the company's supplier stopped the attack and introduced preventive measures. He added that the incident appeared to be connected to attacks reported elsewhere in Europe.
However, major Danish retailers Coop Denmark and Salling Group reported no similar disruptions.
Cybersecurity concerns extend across food supply chain
The incidents have raised concerns about the cybersecurity of refrigeration equipment used throughout Europe's food industry.
The reported vulnerabilities include remotely accessible systems, default passwords and equipment operating outside centralized security networks.
Investigations are continuing to establish whether the incidents were part of a coordinated campaign and to determine the extent of the damage.
While authorities have not reported a threat to Europe's overall food supply, the attacks have highlighted how vulnerable essential food infrastructure can be to cyber disruption.
Sourse:AA
