Fridge cyber attack hits supermarkets across Europe

Hackers raised temperatures in supermarket fridges across Europe in a cyber attack. Photo / Arthur Carron, AFP

Grocery stores across at least nine European countries have been hit by a suspected cyber attack on their freezer systems, prompting the EU to warn of a deliberate attempt to disrupt the bloc’s food supply chain.

Supermarkets in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden reported refrigeration problems that forced some retailers to discard spoiled food after temperatures rose.

The incident came three weeks after a cyber attack disrupted French grocery stores and led hundreds of outlets to throw away spoiled stock.

No one has claimed responsibility for either incident.

EU food and agriculture commissioner Christophe Hansen said the bloc was taking the incidents “very seriously”.

“They are a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it – a warning that we must take seriously,” Hansen said.

In Italy, at least four supermarkets in Sicily and one business in Tuscany were affected, according to media reports and the national cybersecurity agency.

Belgium was among the hardest-hit countries, with dozens of stores across several grocery chains reporting refrigeration failures. Federal prosecutors opened an investigation.

“It’s a cyberattack, there is no other reason,” said Mich Vergauwen, a spokesman for Carrefour Belgium, which said around 15 of its 700 stores were affected.

Ikea said its Mons outlet also experienced a cyberattack that caused freezer temperatures to rise.

Belgian refrigeration company Sabcobel said it had begun securing its installations after the October attack in France, but some systems had yet to be upgraded and were among those affected by the latest attack.

Delhaize, Colruyt and Intermarche also reported refrigeration problems at stores in Belgium, while four Delhaize outlets in Luxembourg were affected.

In Ireland, retailer Musgrave said 13 Supervalu stores were impacted by what it described as a cyber incident.

A small number of corner shops in the Netherlands also suffered disruptions.

In Portugal, the Mosqueteiros group confirmed incidents at seven Intermarche stores linked to a cyberattack, which “appears to have targeted an external service provider responsible for managing the refrigeration systems”.

And in Sweden, chain Coop confirmed six of its around 800 stores had been hit.

“We can confirm that it is a cyber incident. The problem has now been resolved and the fridges and freezers are working as normal,” spokesman Carlos Cancino said.

He said Coop did not know who was behind the attack, but noted that the affected stores had been connected to a 4G mobile network, not the updated 5G system, which made them “more exposed” to hackers.

Swedish chain Ica also said “a limited number” of its stores experienced refrigeration problems, without confirming a cyber attack.

According to Ica spokesperson Helena Johansson, the affected stores were all connected to an external refrigeration control system provided by Danish manufacturer Danfoss – the same supplier targeted in the October 12 cyberattack on French retailers.

In Finland, irregular temperatures had also been detected in a few smaller grocery stores belonging to the Kesko group.

“We are currently investigating the cause, and interference via the network has not yet been ruled out,” Petri Kayhko, head of Kesko’s corporate security, said.

Roni Kokkola, an information security specialist at the National Cyber Security Centre at Finland’s Transport and Communications Agency Traficom, would not rule out cyber interference.

“We’ve seen this in Europe in the past few months, so it spreading beyond France to other countries has been expected,” he said.

“Nowadays it’s very typical that all kinds of vulnerabilities are being exploited ever more actively and rapidly.”

In Estonia, at least one supermarket was attacked by hackers who raised the temperature in the refrigeration units to 50C, public broadcaster ERR reported.

The units were older models delivered by Danfoss, similar to the ones targeted in the France attack, Jann Mutso, director of Kitman Coldtech, a manufacturer and distributor of advanced refrigeration systems, said.

Kiwi injured after fatal helicopter crash in Nepal's Everest region

US launches fresh strikes on Iran's Qeshm Island on eve of midterms

The fine (and not so fine) art of conceding an election defeat

Sri Lanka: Where ancient ruins and leopard safaris an island