Hackers Turned Europe’s Supermarket Freezers Into a New Front Line
Hackers Turned Europe’s Supermarket Freezers Into a New Front Line
A new round of cyberattacks has pushed supermarket refrigeration systems into the spotlight across Europe, turning a mundane piece of retail infrastructure into an unusually potent target. The immediate effect was simple and costly: fridges and freezers heated up, food spoiled and retailers faced hurried checks of stock and equipment.
The latest incidents followed an earlier October attack on hundreds of French supermarkets, where overheating equipment reportedly contributed to fires and spoiled food. Les Mousquetaires, owner of Intermarché, said at the time that the damage was expected to run into several million euros.
Over Sunday and Monday, the disruption spread across Belgium, Luxembourg and beyond. Ahold Delhaize said dozens of Delhaize stores were affected, while Colruyt reported five targeted Spar outlets. Carrefour said 15 Belgian stores were hit, as were 15 Intermarché locations in Belgium. IKEA said its Mons store was affected between Sunday and Monday, though it remained open while the company inspected products and installations. ICA, Kesko, Supervalu and One Selver also reported refrigeration problems.
Retailers stressed containment. Intermarché said that, in most cases, security measures enabled it to “quickly contain the attack,” although some stores lost stock. Ahold Delhaize said its stores had returned to normal operations.
The bigger dispute is over what the attacks mean. No group has claimed responsibility, and investigators have not established a motive. Sophos threat-intelligence director Rafe Pilling said empty fridges carry an outsized public impact: “They can make a relatively small cyberattack feel like a much bigger societal disruption.”
Security adviser Fredrik Blix offered a more technical warning: exposed refrigeration controls can sit on the public internet, and although a vendor patched a vulnerability in August, “thousands of units never got the update.” The European Commission has contacted national authorities and convened EU agencies including ENISA and Europol as the investigation continues.
Write a comment