Europe hit by cyberattack on supermarket fridges

European Supermarkets Hit by Cyberattack

A cyberattack on supermarket refrigeration systems has affected grocery chains in at least seven countries, including Sweden, Belgium, Estonia, Ireland, Finland, Luxembourg, and the Netherlands. According to Engla Ingwall, a sales manager at an ICA supermarket location in Stockholm, Sweden, "everything is destroyed" after their freezers were attacked and heated to 50 degrees Celsius.

Impact of the Attack

The attack had a significant impact on the affected stores, with temperatures rising to as high as 55C in some cases. This resulted in ruined food, with some stores forced to discard fresh and frozen products. Christophe Hansen, the European Commission's commissioner for agriculture, said the attack is a "deliberate attempt to disrupt our food supply chain and undermine ​consumers' confidence."

Investigation and Response

Authorities have launched an investigation into the attacks, but so far, no one has been identified as responsible. The European Commission has said that it will continue to work with member states to strengthen cybersecurity across the bloc. Katrien Eggers, spokesperson for Belgium's Centre for Cybersecurity, said she is concerned about the growing number of cyberattack incidents, saying "all IT systems are potentially vulnerable, and AI can now be used to successfully exploit these weaknesses — especially by sophisticated actors."

Country	Affected Stores
Sweden	ICA, Coop
Belgium	Ahold Delhaize, Colruyt, Carrefour
Estonia	Selver
Ireland	SuperValu
Finland	Unknown
Luxembourg	Unknown
Netherlands	Unknown

Previous Attacks

The attack is not the first of its kind, with similar incidents reported in France last month. In that attack, hackers seized control of cooling systems at hundreds of supermarkets, raising temperatures to as high as 50 degrees Celsius and causing fires and significant food losses.

Expert Commentary

James Stanley, head of engineering at WITTENSTEIN High Integrity Systems, said that the attacks highlight the importance of considering the security of connected products throughout their entire lifespan. "Food retailers are part of critical national infrastructure, and attackers know this," he said. "Disrupting these systems can cause massive financial damage for stores, and more broadly, create nationwide hysteria at a time of increased focus on national cybersecurity." Michael Ferdinandsen, CEO at a Danish industrial cybersecurity company, said, "These incidents illustrate why cybersecurity is no longer just about protecting information. When attackers interfere with operational technology, the consequences become physical."

Frequently Asked Questions

What countries were affected by the cyberattack?

The cyberattack affected stores in at least seven countries, including Sweden, Belgium, Estonia, Ireland, Finland, Luxembourg, and the Netherlands.

What was the impact of the attack on the affected stores?

The attack caused temperatures to rise to as high as 55C in some cases, resulting in ruined food. Some stores were forced to discard fresh and frozen products.

Has anyone been identified as responsible for the attack?

No, authorities have not yet identified who launched the attacks, and no hackers have claimed credit.

The incident has raised concerns about the exposure of remotely managed OT across retail environments, and experts have warned that similar attacks could happen again if cybersecurity measures are not improved. As the investigation into the attack continues, retailers and authorities are working to strengthen cybersecurity measures to prevent such incidents in the future. According to Christophe Hansen, the European Commission's commissioner for agriculture, the Commission will continue to work with member states to strengthen cybersecurity across the bloc.