A coordinated cyberattack swept across European supermarkets Monday, remotely altering refrigeration and freezer settings in retail chains across at least nine countries and forcing stores to discard thousands of tons of spoiled food. The incident, which targeted temperature control systems from Belgium to Finland, marks the second wave of attacks on grocery infrastructure in recent months and has prompted investigations into what security experts describe as a novel form of critical infrastructure terrorism.

Nine Countries Hit as Temperatures Soar to Dangerous Levels

Euronews confirmed that Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, Sweden, and at least two other countries experienced disruptions when hackers remotely changed cooling settings, in some cases programming freezers to heat to 50 degrees Celsius (122 Fahrenheit). The Independent reported that supermarket chains including SuperValu, Delhaize, and major operators in Nordic countries discovered the breach Monday morning when staff found defrosted products and malfunctioning temperature displays.

The Guardian quoted retail security officials describing the attack as "a form of terrorism" targeting food supply chains, with one analyst noting that the coordinated nature across multiple countries suggested sophisticated planning and potential state-level capabilities. Unlike ransomware attacks seeking financial payment, the refrigeration hacks appear designed purely for disruption and economic damage, raising concerns about escalating threats to civilian infrastructure.

Second Attack Wave Highlights Persistent Vulnerabilities

CNBC reported that the Monday incident represents the second major wave of supermarket refrigeration attacks in Europe, following an earlier breach that similarly targeted temperature control systems. The recurring nature of the attacks suggests that retail chains have not fully secured the industrial control systems and Internet of Things devices that manage refrigeration units, despite warnings from cybersecurity experts about vulnerabilities in legacy equipment.

YouTube reports from affected stores showed empty shelves and staff removing products from display cases, with managers estimating losses in the millions of euros from spoiled meat, dairy, frozen goods, and produce. The attacks affect not only the targeted retailers but also suppliers and logistics operators whose products became unsaleable due to broken cold chains, amplifying economic ripple effects across the food industry.

Attribution Questions and Critical Infrastructure Concerns

European cybersecurity agencies have not publicly attributed the attacks to any specific actor, though investigators are examining whether the coordination across nine countries indicates state sponsorship or organized criminal networks. The timing and target selection raise questions about whether the perpetrators sought to test vulnerabilities in critical civilian infrastructure or to inflict maximum economic damage during high-volume shopping periods.

The refrigeration attacks highlight a broader trend of cyberattacks targeting operational technology and physical systems rather than just data networks, with experts warning that power grids, water treatment facilities, and transportation systems face similar risks from adversaries who have studied industrial control system weaknesses. European Union cybersecurity officials are expected to release updated guidance for critical infrastructure operators, though mandatory security standards for retail refrigeration equipment remain under debate.

The incident adds urgency to ongoing European discussions about cybersecurity requirements for Internet-connected devices in commercial settings, with some policymakers arguing that the supermarket attacks demonstrate the need for binding regulations on equipment manufacturers and operators to prevent cascading failures in essential services.