Supermarket freezers in six European countries were hit by a suspected cyber-attack on November 2, 2026, raising temperatures to 50°C (122°F) and causing millions of euros in food waste, according to Delhaize, ICA, and local media reports. The incident follows a similar attack in France last month that affected hundreds of stores.
Supermarket freezers in six countries hit by suspected cyber-attack that raised temperatures to 50°C
A suspected cyber-attack on November 2, 2026, caused supermarket freezers in six European countries to spike to 50°C (122°F), ruining food worth millions of euros.
Key numbers
What happened
A suspected cyber-attack on November 2, 2026, caused supermarket freezers in six European countries to spike to 50°C (122°F), ruining food worth millions of euros. The method involved switching evaporators to defrost mode, a tactic previously used in a similar attack on French supermarkets last month.
Who is affected
The attack disrupted operations at major supermarket chains including Delhaize (40 stores in Belgium/Luxembourg), ICA and Coop (6–7 stores in Sweden), SuperValu (13 stores in Ireland), and Carrefour (15 stores in Belgium). Smaller businesses like butcher shops and cold storage facilities in the Netherlands were also impacted, with at least 17 companies reporting issues.
How the attack worked
The hackers remotely overridden refrigeration controllers, forcing evaporators into defrost mode—a method confirmed by Stephan Moelans, CEO of Sabcobel, as identical to the French attack. This caused freezers to warm up, spoiling food. The Danish company Danfoss, which supplies many of these controllers, had previously warned about security flaws in its systems.
What to do next
Belgian and Swedish cybersecurity agencies are monitoring the incident, while retailers are disconnecting affected units from networks and investigating. Danfoss recommends physical modifications to controllers, not just software updates, to prevent future attacks.
What we know and don’t know
We know the attack raised temperatures to 50°C, affected six countries, and used the same method as France’s October incident. However, no group has claimed responsibility, and the connection to the French attack remains unconfirmed. The long-term impact on food supply chains and cybersecurity measures is still unclear.
Timeline of the Shop freezers cyber-attack
- October 2026: Similar cyber-attack hits French supermarkets, raising temperatures to 50°C and causing food losses.
- November 2, 2026, 2:00 AM local time: Attack begins in Belgium, Luxembourg, Sweden, Ireland, Netherlands, and Estonia, with temperatures spiking overnight.
- November 2, 2026, 5:30 AM local time: ICA stores in Sweden notice the issue and begin cleanup efforts.
- November 2, 2026, ongoing: Retailers disconnect affected units from networks; cybersecurity agencies investigate.
Why it matters
This attack highlights the vulnerability of internet-connected refrigeration systems, which are critical to food supply chains. The financial losses—ranging from tens of thousands to over €100,000 per store—demonstrate the real-world impact of cybercrime on businesses and consumers. It also raises concerns about potential state-sponsored sabotage in Europe.
Key takeaways
- The attack used the same method as France’s October incident, switching evaporators to defrost mode.
- Major chains like Delhaize, ICA, and Carrefour reported widespread disruptions, with food losses exceeding €100,000 in some cases.
- Danfoss controllers, widely used in Europe, were targeted due to known security flaws.
- Belgian and Swedish cyber agencies are monitoring the incident, but no group has claimed responsibility.
- Retailers are disconnecting affected units and investigating, while Danfoss advises physical modifications to prevent future attacks.
Frequently asked questions
How did the hackers raise the temperature so high?
The hackers remotely overridden the refrigeration controllers, forcing evaporators into defrost mode—a setting that causes temperatures to rise significantly. This method was confirmed by Stephan Moelans of Sabcobel as identical to the French attack.
Which countries were affected?
The attack hit supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, and Estonia. No incidents were reported in the UK.
How much food was lost?
One Delhaize store in Belgium reported losing €100,000 worth of produce, though this figure did not include losses from closing the shop. French stores in October reported losses ranging from tens of thousands to over €130,000 per store.
Is this connected to the French attack last month?
The same method was used—switching evaporators to defrost mode—but no official confirmation links the two incidents. Investigations are ongoing.
What can consumers do?
Consumers should check for store closures or temperature alerts and avoid purchasing perishable goods from affected locations. Retailers are working to restore normal operations as quickly as possible.
Could this happen in the U.S.?
While no incidents have been reported in the U.S., similar vulnerabilities exist in internet-connected refrigeration systems worldwide. The attack underscores the need for stronger cybersecurity measures in food supply chains.
See what America is searching today →