Reports indicate that supermarkets in Ireland, Estonia, and the Netherlands have been affected by a wide-scale cyberattack targeting commercial refrigeration infrastructure.
Europe-Wide Refrigeration Hack
Following an incident that struck supermarket fridges in France, a similar hack has crippled supermarket chains in Belgium and Sweden. Hackers targeted supermarkets owned by Dutch outfit Ahold Delhaize, as well as ICA and Coop locations in Sweden. Hackers remotely raised temperatures in these online-controlled freezers to 50 degrees Celsius, rapidly defrosting their contents and destroying millions of dollars worth of items.
Method of Attack
A cyberattack targeting refrigeration units at Belgian supermarkets started on Sunday night. Sabcobel, a refrigeration fitter in the region, estimates that at least twenty units are affected across Belgium, including locations from Delhaize, Carrefour, and Spar. Hackers remotely activated the freezers' built-in defrost mode, overriding the temperature and time spent defrosting, mirroring the method used in the previous French attack.
Mitigation and Security Measures
Industry executives note that while efforts have been made to protect fridges against vulnerabilities, physical modifications to units are required. Switching units to a secure internet connection has been recommended as a temporary solution, a measure carried out by numerous operators following the initial French incident.
Impact on Swedish Stores
Supermarkets ICA and Coop reported similar disturbances in Sweden, with refrigerators and freezers struck across multiple stores. On-site reports showed staff disposing of large quantities of spoiled goods as local management worked to restore operational systems.
Infrastructure Vulnerabilities
The consecutive attacks highlight the reliance of critical infrastructure on internet connectivity, leaving basic functions vulnerable to remote intrusion. Security analysts note that the broader rise in automated intrusions coincides with the wider deployment of advanced software tools that lower the technical barrier for malicious actors.
