Cyberattacks force European supermarket freezers to 50°C

Retailers report millions in food losses across dozens of stores

Local media reports estimated total food discard losses across the affected countries at several million euros. In Belgium, the attacks impacted 40 Delhaize supermarkets.

Another 15 Carrefour shops in Belgium were affected. The Colruyt Group reported that five Spar shops in Belgium were affected by the attacks.

A Delhaize branch in Hoeilaart, Belgium, reported a loss of 100,000 euros in products. AOL reported that at least 70 supermarkets were targeted across five countries, resulting in at least 100,000 euros in food losses.

Swedish and Estonian stores record temperatures reaching 50°C

ICA Kvantum in Sjöbo reported that temperatures inside its refrigeration units reached 50°C. The store confirmed that a cyberattack caused the refrigeration failure. ICA and Coop reported refrigeration system problems on Monday, November 2.

Six stores belonging to the Swedish Coop chain also suffered temperature spikes. Coop press manager Carlos Cancino stated it remains unclear if food was lost or if the units switched to heating mode. ICA Baronen in Stockholm reported that all freezers broke due to a cyberattack that began at 2 a.m. and was discovered at 5:30 a.m..

Kitman Coldtech CEO Jann Mutso reported that an Estonian supermarket chain had its refrigeration systems set to 50°C during an attack on the morning of November 2, 2026.

Cybersecurity experts identify simple exploit of internet-exposed systems

Attackers remotely triggered the forced defrost function of refrigeration systems to a continuous 50°C setting, causing the equipment to heat for several hours. A sector source told BFM that staff opening the fridges in the morning were met with "a wave of heat". Sabcobel CEO Stephan Moelans stated that hackers switched the evaporators of Delhaize’s refrigeration units to defrost mode.

The incident required physical modifications rather than just software updates, according to Moelans.

Olofsson stated that attackers gained access by obtaining login details for control systems that were exposed directly to the internet. He noted the hack was simple enough that amateurs could have performed it.

National agencies and retailers coordinate response to IT incidents

• Delhaize spokesperson Sarah De Meester confirmed the company is investigating unusual temperature increases detected in its refrigeration systems that same day. Belgium’s Centre for Cybersecurity confirmed it is aware of the incidents.

In Sweden, ICA Group press officer Gustaf Nilsson said a limited number of its stores were affected overnight and the company is providing support. ICA and Coop confirmed they are aware of the situation, with Coop stating the incident was "contained and under control".

John Billow, head of the Swedish national cybersecurity centre, said his team is working on several incidents involving supermarket refrigeration systems. Billow confirmed the agency is responding to these incidents and emphasized the necessity of patching or updating exposed operational technology devices in Sweden.

EU officials condemn deliberate disruption of food supply chains

The United Kingdom National Cyber Security Centre is collaborating with international partners to investigate the incidents, though it reported no attacks in the United Kingdom. Authorities have not identified who is behind the recent incidents, and no group has claimed responsibility.

October attacks in France set precedent for mass refrigeration failures

The current incidents follow a similar cyberattack that occurred in France last month, which resulted in significant food losses. In mid-October, a large cyberattack targeted Danfoss refrigeration equipment in hundreds of French supermarkets, resulting in food destruction and fires.

Ahold reported a separate cybersecurity incident to Dutch police last month, though it is not linked to the incidents on Monday, Nov. 2.