UPDATE — 3 November 2026, ~14:45 IST: The wave has now reached the UK. The National Cyber Security Centre's chief executive, Dr Richard Horne, confirmed on BBC Radio on Tuesday morning that "a handful of organisations in the UK" have been alerted and the NCSC is "aware of a couple of impacts" — a change from Monday, when the NCSC said it knew of no UK impact. The NCSC is urgently warning British retailers to update the software on fridge temperature controllers, and UK meat suppliers were among those who had to throw out stock, The Times reports, citing retail magazine The Grocer. Horne said it is too early to say who is behind the attacks and that the NCSC worked overnight alerting organisations with exposed, vulnerable technology. Attribution remains unconfirmed.
UPDATE — 3 November 2026, ~03:50 IST: The attack's footprint is now put at at least eight countries, AFP reports. Portugal: the Mosqueteiros group confirmed incidents at seven Intermarché stores, saying the attack "appears to have targeted an external service provider responsible for managing the refrigeration systems". Finland: irregular temperatures were detected in a few smaller Kesko-group grocery stores, and Finland's National Cyber Security Centre says a cyberattack cannot be excluded. Belgian federal prosecutors have opened an investigation, without yet qualifying the incident as a cyberattack. The EU's food and agriculture commissioner, Christophe Hansen, denounced the incidents as a "deliberate attempt to disrupt the bloc's food chain". Still no group has claimed responsibility, and no confirmed link to the 12 October France attack.
UPDATE — 2 November 2026, 7:45 PM IST: The incident has spread beyond supermarkets. Ikea Belgium has confirmed a cyberattack hit its store in Mons, in southwestern Belgium, causing freezer temperatures to rise suddenly in the early hours of Monday — the only Ikea store affected, because it uses a different service provider from the chain's other Belgian stores. Carrefour Belgium has now also explicitly confirmed a cyberattack, with a spokesperson saying "It's a cyberattack, there is no other reason" — about 15 of its 700 Belgian stores were disrupted. Intermarché said its incidents happened overnight Sunday-to-Monday and that in some cases only a single refrigerator was affected, so the impact there was limited. Attribution is still unconfirmed: no group has claimed responsibility and no link to the October attack on French supermarkets has been established.
Illustrative image: a supermarket frozen food aisle. Image: Wikimedia Commons. This is not a photo of an affected store.
TL;DR — Europe supermarket freezer cyberattack explained in one line: overnight on 1–2 November 2026, suspected cyberattacks hit refrigeration and freezer systems at supermarkets in Belgium, Luxembourg, Sweden, Ireland and Estonia, pushing temperatures as high as 55°C, spoiling food and closing some stores — weeks after a similar attack on hundreds of French supermarkets — and investigators have not yet confirmed who is behind it.
📌 KEY HIGHLIGHTS
- Five countries hit overnight: Belgium, Luxembourg, Sweden, Ireland and Estonia reported freezer and fridge temperature spikes on Monday 2 November 2026.
- Belgium worst affected by store count: around 40 Delhaize stores, about 15 Carrefour stores and five Spar shops, plus Intermarché and Shop & Go sites.
- Temperatures up to 55°C: one Swedish store found a freezer reading 55°C; others reported 50°C after units were switched to defrost mode.
- Food spoiled, stores closed: affected shops threw out fresh and frozen stock; some closed for the morning before reopening.
- Attribution still unconfirmed: retailers call it an "IT incident" or "cyber incident"; no group has claimed responsibility and no link to the October France attack has been established.
Europe supermarket freezer cyberattack: what happened?
On the night of Sunday 1 November to Monday 2 November 2026, refrigeration and freezer systems at supermarkets across Europe began malfunctioning at the same time. Store managers arriving on Monday morning found freezers that would not respond to manual controls, water on the floor from thawed stock, and temperature displays far above freezing.
In Belgium, Delhaize — part of Ahold Delhaize — said on Monday it had identified "an IT incident affecting the refrigeration systems in several dozen of our stores". Belgian media reported around 40 Delhaize branches affected, along with about 15 Carrefour stores, five Spar shops operated under Colruyt Group's franchise system, and sites run by Intermarché and Shop & Go. Stephan Moelans, CEO of refrigeration firm Sabcobel, which operates Delhaize's systems, told the Belga news agency the incident was a cyberattack in which the units' evaporators were switched to defrost mode. Delhaize said it disconnected the affected refrigeration systems from the internet while it investigates.
In Sweden, grocery giant ICA confirmed that a "limited number" of its stores, operating outside ICA's central network, were affected overnight, while Coop told Swedish daily Aftonbladet that six of its stores in central Sweden were hit. At ICA Nära in Böda, on the island of Öland, the manager arrived to find water covering the floor and a freezer reading 55°C. An ICA Kvantum store in Sjöbo, southern Sweden, said on social media that hackers had set its refrigerators and freezers to 50°C and closed for the morning before reopening. At an ICA Baronen store in Stockholm, a notice said all the shop's freezers were broken due to a cyberattack, with the store's sales manager saying the attack happened at 2 a.m. and was noticed at 5:30 a.m. Sweden's national cybersecurity centre is responding: its head, John Billow, told Reuters it was working on several incidents regarding refrigeration systems in grocery stores around Sweden. Al Jazeera also reported that retailer Axfood said freezers at a distribution centre for home grocery deliveries in the Gothenburg area were hacked.
In Ireland, Musgrave — parent of SuperValu, the country's third-largest supermarket chain — said refrigeration systems belonging to a specific model had been affected by a "cyber incident" at 13 of its 223 stores, with chilled and frozen food pulled from shelves. In Estonia, technology supplier Kitman Coldtech told public broadcaster ERR that attackers accessed an older Danfoss controller at a large chain and set a freezer to 50°C.
Which stores and chains were affected?
| Country | Chains / stores reported | What was reported |
|---|---|---|
| Belgium | Delhaize (~40 stores), Carrefour (~15), Spar (5), Intermarché, Shop & Go | "IT incident"; evaporators switched to defrost mode, per Sabcobel CEO |
| Luxembourg | Ahold Delhaize stores | Temperature increases in cooling systems, per Belga |
| Sweden | ICA (limited number), Coop (6 stores), Axfood distribution centre | Freezers set to 50–55°C; national cybersecurity centre responding |
| Ireland | SuperValu (13 of 223 stores) | "Cyber incident" limited to a specific refrigeration model |
| Estonia | At least one large chain | Older Danfoss controller accessed; freezer set to 50°C |
Illustrative image: frozen food on display in a supermarket. Image: Wikimedia Commons. This is not a photo of an affected store.
Why this echoes the France supermarket attack
The 2 November incidents come about three weeks after a cyberattack on 11 October in which hackers seized control of cooling units at hundreds of supermarkets in France, raising temperatures to around 50°C, spoiling food and causing fires at several stores. That attack remains under investigation by the cybercrime unit of the Paris public prosecutor's office and ANSSI, France's cybersecurity agency.
The similarities — overnight timing, the same defrost-mode method, the same ~50°C readings — are striking, but no source has established that the same attackers are behind the French and the 2 November incidents, and nobody has claimed responsibility for either. Ahold Delhaize also reported a separate cybersecurity incident to Dutch police last month after detecting suspicious activity in its infrastructure; it is checking whether that relates to 2 November. The honest position right now: a coordinated-looking wave of attacks on the same kind of connected refrigeration equipment, with attribution still open.
Why it matters for Europe readers
Supermarket refrigeration looks mundane until it stops working — and that is exactly why it is a target. Modern commercial cooling is connected equipment: controllers that can be monitored and adjusted remotely, sometimes over the internet, sometimes through older units never designed to be exposed. When those controls are hijacked, the damage is physical and immediate: thousands of euros of food per store, lost in hours, plus the cost of cleaning, restocking and bringing in refrigerated lorries.
For shoppers, the practical impact is short-term: some stores have no fresh or frozen produce to sell today, and anything that sat above safe temperatures has to be thrown away rather than sold. There is no indication so far that customer data was stolen or that payment systems were affected — this appears to be an operational-technology attack on equipment, not a data breach. For the wider picture, it is the second time in a month that Europe's food retail has been hit this way, which puts pressure on chains and regulators to audit which refrigeration controllers are internet-connected and how they are secured.
Should you care?
✅ Verdict: Yes, if you shop in Europe — but there is nothing you need to do differently. Expect some empty freezer aisles and possible short closures at affected stores today. Do not buy chilled or frozen food that feels warm or looks thawed, and trust stores that discard stock rather than re-freeze it. ⏳ Watch for attribution: whether investigators link this wave to the France attack will determine whether this is a one-off copycat or a campaign against food retail.
FAQs
Was this a confirmed cyberattack?
Partly. Retailers and suppliers describe it differently: Delhaize calls it an "IT incident", Musgrave a "cyber incident", while Sabcobel's CEO and affected Swedish stores call it a cyberattack outright. Sweden's national cybersecurity centre is responding to several incidents. Investigators have not yet published findings, so attribution remains unconfirmed.
Which countries were affected?
Belgium, Luxembourg, Sweden, Ireland and Estonia all reported incidents overnight on 1–2 November 2026. Belgium had the highest store count (around 40 Delhaize stores plus Carrefour, Spar and others); Sweden's ICA and Coop, Ireland's SuperValu (13 stores) and at least one Estonian chain were also hit.
Is this linked to the France supermarket freezer attack?
Not established. The method and temperature readings look similar to the 11 October attack on hundreds of French supermarkets, but no source has confirmed the same attackers, and no group has claimed responsibility for either incident.
Is customer data at risk?
No evidence so far. The attack targeted refrigeration equipment controls, not customer databases or payment systems, and no retailer has reported stolen personal data in connection with the 2 November incidents.
What should shoppers do?
Nothing special. If your local store's freezers were affected, expect reduced fresh and frozen ranges today. Avoid buying chilled or frozen items that are warm or visibly thawed, and check store notices before visiting an affected branch.
Takeaway: A suspected cyberattack wave hit supermarket freezers in five European countries overnight, spoiling food and closing some stores — the second such wave in a month, with attribution still open. The story to watch now is whether investigators link it to the France attack.
Follow UK & Europe Tech on TechByCountry for tomorrow's update.
📸 Get tech in the last 24 hours on Instagram — follow @_techinlast24hrs for daily posts (9 AM–9 PM) and reels at 12:30 PM & 8:30 PM.
Sources
Reuters: Temperature soars at Swedish grocery store freezers, one store blames hackers (2 November 2026) • Al Jazeera: Supermarket fridges in Sweden, Ireland overheat amid suspected cyberattacks (2 November 2026) • The Register: Frozen part II: Hackers remotely defrost produce in Euro supermarkets… again (2 November 2026) • Related TechByCountry coverage: Binance suspected hack explained and GMO Onamae Desktop Cloud breach explained.
Comments
Post a Comment