Cyber attack in seven European countries disables shop freezers
Dozens of supermarket freezers and refrigerators across seven European countries were targeted in a suspected cyber-attack on the night of 1–2 November 2026, causing temperatures to surge (in some cases to 50°C / 122°F or higher) and spoiling large amounts of food.
This is the second such wave in roughly three weeks, following a larger attack in mid-October 2026 that affected hundreds of stores in France (estimates around 400–700) and caused millions of euros in losses, with some units reportedly overheating enough to start fires.
Affected countries and retailers
The countries hit were Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland. Key impacts included:
- Belgium and Luxembourg: Around 40 Delhaize (Ahold Delhaize) stores were affected, plus about 15 Carrefour stores, roughly 15 Intermarché locations, and around 5 Spar/Colruyt franchise shops. One Delhaize branch in Hoeilaart estimated €100,000 in lost produce (not including closure-related losses). An IKEA store in Belgium was also reported hit.
- Sweden: Limited numbers of ICA and Coop stores. Some ICA locations reported freezers set to 50°C; staff discarded large volumes of stock, and at least one store temporarily closed.
- Ireland: 13 SuperValu stores (Musgrave Group); chilled and frozen products were removed as a precaution.
- Netherlands, Estonia, and Finland: Smaller numbers of sites, including some K-stores (Kesko) in Finland and at least one Selver supermarket in Estonia. Equipment maker Danfoss reported impacts at around 17 Dutch businesses.
Overall, media reports point to dozens to nearly 100 stores affected in this wave. Staff were seen emptying freezers into trolleys and discarding spoiled goods.
How it happened
Attackers remotely accessed internet-exposed refrigeration control systems (often older units with weak or unpatched security, default credentials, or insecure connections) and switched evaporators into defrost mode or directly raised set temperatures. Suppliers mentioned include Belgian firm Sabcobel and Danish firm Danfoss (linked to the earlier French incidents). The method closely matches the October French attacks.
Context and response
EU food and agriculture commissioner Christophe Hansen described the repeated incidents as “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it.”
No group has publicly claimed responsibility. Speculation includes possible state-linked actors (given the timing and psychological impact on food supplies), though this remains unconfirmed. Similar refrigeration issues have also been noted at some US military commissaries, prompting separate investigations.
Retailers and suppliers have restored systems in many cases, but the attacks highlight ongoing risks from poorly secured IoT/industrial control systems in critical supply chains. Investigations by national cybersecurity centers and law enforcement are underway.
sources:
- BBC News. “Shop freezers in seven European countries hit by cyber-attack.” 2 November 2026.
https://www.bbc.co.uk/news/articles/cq1kd1nee80eo - The Guardian. “Shop fridges and freezers across Europe hit by fresh suspected cyber-attack.” 2 November 2026.
https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack - Reuters. “New cyberattack on supermarket fridges sweeps across Europe.” 2 November 2026.
https://www.reuters.com/business/retail-consumer/temperature-soars-swedish-grocery-store-freezers-one-store-blames-hackers-2026-11-02/ - Financial Times. “What do we know about Europe’s freezer hacks?” 3 November 2026.
https://www.ft.com/content/90e63a7f-45d7-4e7a-940d-6d5145d51941 - Newsweek. “European countries hit by supermarket freezer cyberattacks.” 2 November 2026.
https://www.newsweek.com/european-countries-hit-by-supermarket-freezer-cyberattacks-12649185