Freezers hit in 7 countries: why Europe's cold chain is a repeat target

Grocery stores in at least seven European countries saw refrigerator and freezer temperatures soar on Nov. 2 after a cyberattack that mirrors one three weeks earlier in France. The affected countries include Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden. Supermarket groups Ahold Delhaize and Colruyt in Belgium and Luxembourg, Swedish grocers ICA and Coop, and at least one IKEA store were hit. Stores threw out spoiled or at-risk food and restocked.

The earlier French attack, overnight on Oct. 11–12, hit more than 400 stores of Intermarché, Coopérative U, E.Leclerc and Carrefour. Coopérative U confirmed 80 of its roughly 2,000 stores had cold-chain systems compromised. In both waves, attackers disabled temperature alarms and remotely raised freezer temperatures to 50°C (122°F), with one report of 80°C. Some stores saw fires and sprinkler activation.

The attacks affected Danfoss-made refrigeration controls used by French supermarkets, and also disrupted deliveries and in-store pricing powered by electronic shelf labels. That common infrastructure means a single intrusion pattern can cascade across multiple retailers and borders. The second wave demonstrates the food supply chain is a repeat target, not a one-off.

No one has claimed responsibility. That leaves motive and attribution unresolved. Danish military intelligence has warned that Russia could escalate hybrid war against Europe, including destructive cyberattacks, but no evidence has been presented linking that warning to these incidents.

The practical impact extends beyond spoiled inventory. Cold-chain failures trigger food-safety risks, delivery disruptions and pricing errors. The EU's NIS2 Directive covers food supply and digital infrastructure, with a staged incident notification process requiring the first signal to a national CSIRT or competent authority within 24 hours. Whether enforcement will follow for cold-chain cybersecurity failures at food retailers is not yet clear.