Cyberattacks target refrigeration systems across European supermarkets and facilities

Beginning on November 2, 2026, a wave of coordinated cyberattacks targeted refrigeration and cooling systems across at least seven European countries, including Belgium, Sweden, Luxembourg, Ireland, Estonia, Finland, and the Netherlands. Attackers remotely manipulated temperature controls in retail chains such as Carrefour, Delhaize, ICA, Coop, SuperValu, and IKEA, raising temperatures to as high as 50 degrees Celsius. These actions led to the destruction of significant quantities of perishable food, forcing retailers to dispose of inventory. In Greece, similar incidents were reported at a supermarket and a butcher shop in Kifisia, while authorities also confirmed an attack on the French National Blood Service (EFS), where temperature settings for blood sample storage units were allegedly changed to 110 degrees Celsius.

Investigations are being coordinated by the European Commission, the European Union Agency for Cybersecurity (ENISA), and Europol through the EU-CyCLONe network. While no specific group has claimed responsibility and no clear financial motive has been identified, security experts suggest that attackers may have exploited weak passwords or outdated software in internet-connected cooling controllers. European authorities have issued urgent warnings for organizations to disconnect critical cooling systems from the public internet to prevent further damage. The European Commission has characterized the incidents as a deliberate attempt to disrupt the food supply chain and undermine public trust.