InfoSecBulletin Cybersecurity for mankind
A cyberattack on refrigeration systems has affected stores of many supermarket chains in various European countries. Hackers changed the temperature settings on freezers and cooling systems from afar. Refrigeration failures were found at many supermarkets, but it’s not clear if they were part of a planned attack or hit individually.
BleepingComputer confirmed that more than 115 stores in Belgium, the Netherlands, Sweden, Luxembourg, Ireland, and Estonia have been affected.
Multiple European supermarket fridges got hacked: Temperatures reached high as 55°C
Apple Warns 99 Countries iPhone Users of Mercenary Spyware Attacks
Daily Cyber security update for 31.10. 2026
NetamLoader malware to attack Win10: Customized for Gov.t in Asia
‘SMS of Death’ Zero-Click Flaw Disrupting Android Phones With a Single Text
NIST Unveiled Guidance for Post-Quantum Cryptography Transition
Daily Cyber security update for 29.10. 2026
Rapid7 Unveils 17 Zimbra Collaboration Suite Flaws Breaking Identity Boundaries
CISA launched two free tools Identify Security Misconfig in Microsoft 365 and Google Workspace
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
Supermarket chains that acknowledged refrigeration issues include:
ICA (Sweden) – At least 4 locations affected
Coop (Sweden) – 7 locations confirmed affected
Ahold Delhaize (Belgium and Luxembourg) – Around 40 locations affected
Carrefour (Belgium) – 15 locations affected
Spar Colruyt (Belgium) – 5 locations affected
Intermarché (Belgium) – Around 15 locations affected
SuperValu (Ireland) – 13 stores
Selver (Estonia) – 1 store
In the Netherlands, at least 17 butcher shops and local stores have been affected. Spokespersons for ICA, Ahold Delhaize, and Spar Colruyt told BleepingComputer that their companies are providing support to affected stores and working to resolve the situation.
“We can confirm that we have been informed of an incident overnight affecting a small number of ICA stores operating outside ICA’s central network,” stated ICA’s press officer.
“The incident impacted the stores’ refrigeration and freezer systems. ICA is currently supporting the affected stores in managing the situation.”
A representative of the Colruyt Group told BleepingComputer that “there is an impact on the refrigeration systems at around five Spar stores.”
“These stores are operated by independent entrepreneurs who have their own refrigeration systems. We are currently doing everything we can to resolve the issue.”
In a statement Ahold Delhaize stated that refrigeration systems at several dozen stores have been impacted by an IT incident.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores,” the company’s communications department said, adding that the company “immediately took the necessary measures to keep our stores operational.”
A spokesperson for Coop, a big grocery store chain in Sweden, said that some stores had problems with their refrigeration units, and in one case, the system began to produce heat.
“We can confirm that a small number of stores were affected overnight into Monday – specifically 7 out of more than 800 stores,” Coop told BleepingComputer.
“The situation is currently contained and under control. The issues have ranged from completely shut-down refrigerators and freezers to partially functioning units, and in one case, the system beginning to generate heat.”
In Belgium, only Carrefour stores in two regions were affected, and all hypermarkets remained completely operational.
“The impact at Carrefour is very limited: currently 15 of our 700 stores are affected, both in Flanders and Wallonia,” Carrefour stated.
“Not a single hypermarket is among them. All stores remain open because it only concerns a few refrigeration units, mainly freezers. Quick action was taken so that all stores can stay open.”
An ICA store manager told TV4 that the store’s temperature was changed to +50°C (122°F) overnight and could not be changed back, resulting in the store throwing away frozen food.
According to RTL media publication, Ahold Delhaize warned managers by SMS around 4 a.m. about refrigeration issues, and some stores used refrigerated trucks to try to preserve stock.
The report named Sabcobel as the seller of cooling systems in many of the affected areas.
According to Sabcobel’s director, Stephan Moelans, the attacker leveraged the same vulnerability used in similar attacks last month in France.
Moelans said that technicians started disconnecting affected installations since 1a.m. and attributed the disruption to remotely activated defrost functions. Although the company tried to protect customer’s systems, a simple software update is not enough, as refrigerators also require physical modifications.
“The simplest solution is to manage the refrigerators via a secure internet connection. Most of our clients have adopted this solution since the attack in France,” Moelans told RTL.
Last month’s refrigerator attacks in France impacted hundreds of stores using Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration controllers that were compromised by remote attackers who set them to defrost mode.
