Dozens of supermarkets across Belgium, Sweden and Ireland have been struck by a suspected cyber-attack that manipulated refrigeration systems, forcing the disposal of thousands of euros worth of perishable food. The incident marks the second major attack on European grocery chains in recent weeks, following a similar breach that affected hundreds of French supermarkets in October.
According to BBC News, approximately 40 Delhaize supermarkets and 15 Carrefour stores were compromised in Belgium, while several ICA and Coop locations in Sweden experienced disruptions. Thirteen SuperValu shops in Ireland were also affected. The identity of those responsible remains unknown.
The attack operated by remotely altering freezer and refrigerator settings to dangerously high temperatures. At one ICA store in Sjöbo, southern Sweden, temperatures were raised to 50°C (122°F), destroying stock and forcing temporary closure. Brussels Times reported that five independently operated Spar stores in Belgium also reported refrigeration malfunctions, and butcher chain De Laet & Van Haver experienced a comparable incident, though staff intervention prevented excessive temperature rises.
In Belgium, Euronews estimated approximately €100,000 worth of food was discarded across affected locations. Delhaize notified store managers by text message at around 4 a.m., and some branches deployed refrigerated lorries to preserve remaining inventory while disconnecting refrigeration systems from internet connections. The company also confirmed that some Delhaize branches in Luxembourg were affected, though it did not disclose the exact number.
How did retailers respond?
Delhaize, one of Belgium's largest supermarket chains, described the incident as a "computer incident" that occurred overnight at 40 shops. Carrefour stated it was "currently analysing" the breach at 15 of its Belgian locations. A spokesperson for ICA in Sweden confirmed the attack had targeted a "small number of ICA stores operating outside ICA's central network" and said the company was "currently supporting the affected stores in managing the situation."
The ICA branch in Sjöbo announced the breach on social media, stating:
Our refrigerators and freezers have been hacked overnight and they have set the temperature to 50 degrees.The store subsequently reopened to customers after addressing the issue.
Seven of Coop Sweden's 800 stores were affected, with the company telling the BBC the "situation is currently contained and under control." Musgrave, the owner of SuperValu, reported that the Irish incident involved a specific refrigeration model; affected chilled and frozen products were removed from sale, while other merchandise remained available for purchase.
What technical measures are being taken?
According to refrigeration specialist Sabcobel, at least 20 Belgian refrigeration units required physical modifications to prevent future breaches. The company's chief executive stated that secure internet connections represent an interim protective measure, but hardware-level changes are necessary for comprehensive security.
Musgrave said it was investigating the incident with refrigeration-equipment suppliers and cybersecurity specialists to resolve the issue and restore normal operations, though no scheduled completion date was provided.
How does this connect to earlier attacks?
This incident follows a coordinated cyber-attack on hundreds of French supermarkets in October 2026, which similarly involved raising refrigeration temperatures to 50°C and destroying millions of euros worth of perishable stock. The Paris prosecutor's office opened an investigation into that earlier breach. While both incidents employed identical methods—manipulating defrost-mode settings—the connection between the attacks and whether they share perpetrators has not been established.
Key Facts
- Approximately 40 Delhaize and 15 Carrefour stores in Belgium, multiple ICA and Coop locations in Sweden, and 13 SuperValu shops in Ireland were affected
- Freezer temperatures were remotely set to 50°C (122°F), destroying perishable inventory estimated at €100,000 in Belgium alone
- Delhaize disconnected refrigeration systems from internet connections and deployed refrigerated lorries to preserve stock
- The attack follows a similar breach on French supermarkets in October 2026 using identical temperature-manipulation tactics
- The attacker's identity remains unknown, and investigations are ongoing with cybersecurity specialists and equipment suppliers
