Suspected cyber-attack knocks out supermarket freezers across Belgium, Sweden and Ireland

What happened

Dozens of supermarkets across Belgium, Sweden, Luxembourg and Ireland have lost refrigeration in a suspected cyber-attack, according to the BBC. Around 40 Delhaize shops in Belgium and Luxembourg were hit, along with several ICA and Coop stores in Sweden and thirteen SuperValu locations in Ireland. Local media report that food worth millions of euros has had to be discarded as a result.

The clearest sign that this was a deliberate act rather than an ordinary outage comes from an ICA store in Sjöbo, southern Sweden. Writing on social media, the shop said its refrigerators and freezers had been compromised overnight and that someone had changed the temperature setting to 50C, roughly 122F. The store shut its doors but has since reopened to customers.

How each chain fared

Delhaize, one of Belgium's largest grocery chains, told Belgian media that a computer incident struck overnight at 40 shops. A branch in Hoeilaart, in the province of Flemish Brabant, told the newspaper Het Laatste Nieuws that it lost around €100,000 worth of produce — a figure its manager said did not even account for the additional losses from closing the store.

Carrefour, which also operates in Belgium, said the disruption touched 15 of its stores there, and that it took immediate measures so that every shop could stay open.

In Sweden, an ICA spokesperson said the problem affected a small number of stores running outside the chain's central network, and that the company is helping those shops manage the situation. At an ICA branch on Odengatan in central Stockholm, an employee was photographed carrying bags of spoiled food out of the building. Coop reported that seven of its roughly 800 Swedish stores were affected and described the situation as contained and under control.

For Ireland, the BBC's report notes only that thirteen SuperValu shops were impacted, without further detail on that chain.

What is not yet known

Neither the BBC nor the retailers involved have said who is behind the incident or how the attackers gained access. Belgium's and Sweden's national cyber-security agencies are both monitoring the situation.

The pattern is nonetheless suggestive: separate chains in separate countries, disrupted in the same window, all through the same category of equipment. Supermarket refrigeration is normally run by networked controllers that regulate temperatures, defrost cycles and alarms, and stores that share a control platform or an external maintenance provider can also share its weaknesses. ICA's remark that only stores outside its central network were hit hints that the weak point may sit with independently managed store systems rather than chain-wide corporate IT — though that remains inference until investigators say more.

Why it matters

Most cyber-attacks make headlines through stolen records or encrypted files. This one destroyed physical goods: within hours, frozen and chilled stock across dozens of shops became unsellable, at a cost one branch alone put at €100,000 and which local media put in the millions of euros overall. It is a concrete demonstration that building-control and IoT systems — refrigeration controllers, HVAC, energy management — are part of a business's attack surface, and that compromising them produces spoilage, closures and lost trade rather than a ransom note.

The cross-border scale also raises the question of a shared supplier or platform as the initial vector, something retailers and their facilities vendors will now have to examine. For independent store owners, who often run their own systems outside a chain's central network, the episode is a reminder that a remotely managed freezer controller is still a networked device that needs patching, monitoring and access control like any other. Expect the incident to add momentum to calls for tighter security standards around operational technology in everyday commercial settings, not just in factories and utilities.