Europe Supermarket Fridge Cyberattack: How Hackers Hit Stores Across 8 Countries

The Europe supermarket fridge cyberattack spread across the continent on Monday, November 2, 2026, hitting grocery stores from Sweden to Portugal. Retailers in at least eight countries reported fridges and freezers warming up overnight, and several chains threw away food that had spoiled or was at risk of spoiling. The European Union denounced the incidents as a deliberate attempt to disrupt its food chain, three weeks after a similar attack in French supermarkets.

What makes this incident unusual is how it happened. The attackers did not target checkout systems or customer data. Instead, they appear to have gone after the refrigeration systems themselves, remotely raising temperatures in some units to 50 degrees Celsius. Once cold-chain food warms up, it cannot simply be re-chilled and sold, so the immediate result was discarded food.

Europe supermarket fridge cyberattack: which countries and stores were hit

Reports from AFP, Reuters and Deutsche Welle on November 2 put the affected countries at Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands, Portugal and Sweden, with France hit by a separate but similar attack on October 12. Not every retailer used the same words, so the list below separates what chains confirmed as a cyberattack from what they described only as a technical or IT incident.

• Belgium: Carrefour reported disruption in about 15 of its 700 stores; its spokesman said, "It's a cyberattack, there is no other reason." Around 40 Delhaize stores, plus Colruyt, Intermarche, Spar and an Ikea store in Mons, also reported fridge problems.
• Sweden: Coop confirmed six of its around 800 stores were hit by a cyber incident, now resolved. Ica reported problems in a limited number of stores, without confirming a cyberattack.
• Ireland: Musgrave, which owns SuperValu, said 13 of its stores were affected by a cyber-incident.
• Luxembourg: Four Delhaize stores reported problems, and Ahold Delhaize reported an overnight IT incident affecting freezers in Belgium and Luxembourg.
• Portugal: Mosqueteiros confirmed incidents at seven Intermarche stores linked to a cyberattack, apparently targeting an external refrigeration service provider.
• Estonia: Broadcaster ERR reported at least one supermarket attacked, with refrigeration temperatures raised to 50 degrees Celsius.
• Finland: Irregular temperatures were found in a few smaller Kesko stores; network interference had not been ruled out.
• Netherlands: A small number of corner shops suffered disruptions, according to AFP.

How the supermarket fridge cyberattack worked: remote refrigeration controls

The common thread is remote control. Modern supermarket refrigeration is monitored and managed through external systems, sometimes over mobile networks, so a chain can watch hundreds of stores from one place. That convenience is also the vulnerability. Coop said its affected stores had been connected to a 4G network rather than the updated 5G system, making them more exposed. Ica said its affected stores were all connected to an external refrigeration control system from Danish manufacturer Danfoss, the same supplier named in connection with the October 12 attack in France.

Belgian refrigeration group Sabcobel told AFP it had begun securing its installations after the French attack, but around 10 per cent were still not fixed, and some of those were in shops affected on Monday. In Estonia, a refrigeration executive told ERR the affected units were older Danfoss models similar to those targeted in France. Danfoss had yet to respond to AFP's request for comment, and no official link between the French and Monday attacks has been established.

What the EU and investigators have said so far

EU food and agriculture commissioner Christophe Hansen said the bloc was taking the incidents very seriously, calling them a deliberate attempt to disrupt the food supply chain and undermine consumers' confidence in it. A Commission spokesperson added that food security is not currently at risk, but that the food waste and impact on businesses are real.

In Belgium, federal prosecutors opened an investigation, but without qualifying the incident as a cyberattack at that stage. That caution matters: while several chains were unequivocal, others, including Ica and Kesko, stopped short of confirming a cyberattack. Sweden's National Cyber Security Centre said it was investigating exposed operational technology devices, from refrigerators to security cameras, that need updating or patching.

Why a fridge attack is a food security story, not just a tech story

A supermarket fridge is critical infrastructure in a way that is easy to miss until it fails. If temperatures rise for hours, chilled and frozen food must be discarded, even if it looks fine, because bacteria multiply quickly once food leaves safe cold storage. That is why the immediate visible effect was staff throwing away bags of spoiled food outside stores, as photographed outside an ICA supermarket in Stockholm on November 2.

The wider worry is the pattern. The October 12 attack in France affected hundreds of supermarkets. Monday's incidents, three weeks later, spread the same kind of disruption across at least eight countries in a single night. Specialists quoted in the reports said the spread beyond France had been expected, and that vulnerabilities in connected industrial systems are being exploited ever more actively. No individual or group had claimed responsibility for either attack at the time of reporting.

Europe supermarket fridge cyberattack FAQs