Supermarket Fridge Attacks: Belgium Investigates, Suspected Sabotage

TVS News AI, editorially supervised, presents Supermarket Fridge Attacks: Belgium Investigates, Suspected Sabotage.

Overnight on Monday, refrigeration systems failed in supermarkets across several European countries. In Belgium, the prosecutor’s office has opened a criminal investigation. Der Spiegel reports that problems with freezers and refrigerators have also been reported in Sweden, Luxembourg and Estonia.

This is more than a handful of failed refrigerated shelves: an Ikea store in Mons, Belgium, was affected. The company removed food from refrigerated shelves as a precaution. At the Belgian butcher shop De Laet & Van Haver in Hove, temperatures in refrigerators rose to as high as 18 degrees Celsius. As a result, meat products worth around €15,000 became unfit for consumption.

An Attack on Refrigeration — Across Several Countries

Belgium, Sweden, Luxembourg and Estonia reported problems with freezers and refrigerators on the same night. Dozens of stores appeared to have been affected across the countries, including branches of Delhaize, Spar and Carrefour.

The Mons incident involved an Ikea store. The company said some food had to be removed from its refrigerated shelves. At the Swedish ICA Kvantum store in Sjöbo, refrigeration and freezer units had been set to 50 degrees Celsius, according to a Facebook post. The store later said the affected products had to be discarded.

Six branches of the Swedish Coop were also affected. A store in Stockholm reported that all its freezer units had reached 10 degrees and that everything had spoiled.

Sabcobel confirmed that the systems had been remotely switched into defrost mode. The refrigeration installation installation and maintenance specialist therefore deployed technicians from 1 a.m. to bring the situation under control.

Now, large quantities of food have also thawed in countries such as Belgium and Sweden.

The Trail Leads to Danfoss and Known Security Vulnerabilities

The current incidents were preceded by similar cyberattacks in France in mid-October. Around 150 stores were affected at the time. The targets were freezer units made by the Danish technology company Danfoss. The company confirmed that its products were also involved in the more recent wave of attacks.

The first attack exploited long-known security vulnerabilities. These allowed attackers to take full control of refrigeration systems over the internet. Danfoss had already released updates for newer devices in August. The company advised customers with older devices to disconnect them from the network if they could no longer receive updates.

Following the initial incidents, several European security authorities urged retailers to inspect their own systems and protect them against attacks. The German Federal Office for Information Security was among the authorities named. Why these security measures were not implemented in the specific cases must now be investigated.

The Prosecutor Is Investigating, but the Perpetrator Remains Unknown

What is firmly established: Belgium’s prosecutor has opened a criminal investigation. This does not mean that a perpetrator or culpability has already been established. The report names no individual suspects or concrete evidence.

The European Commission also assesses the incidents as cyberattacks with direct effects on everyday life. A spokesperson said on Monday that the incidents showed how cyberattacks could disrupt services, impair businesses and have an immediate impact on citizens. The Commission therefore stressed the need to strengthen cybersecurity across the entire Union.

Christophe Hansen, EU Commissioner for Agriculture and Food, suspects that the attacks were “a deliberate attempt to disrupt the EU’s food supply” and were intended to undermine consumers’ confidence in the system. At the same time, he stressed that food safety is not currently at risk. This assessment is important because it separates the political and economic suspicion from the concrete public-health evaluation.

Who is behind the attacks remains unclear. No hacker group has yet claimed responsibility. For you, this means the European Commission is offering a reasoned suspicion, but not proof of identity.

Why Retail Is an Attractive Target for Attackers

Tom Hegel, a researcher at the IT security firm SentinelOne, told Reuters that such attacks were usually extortion attempts, politically motivated actions or state-backed operations. Because no financial demands have been reported so far, Hegel indicated that sabotage was the likely explanation.

Retail is an easy target because large chains have an enormous number of refrigeration controls, building management systems, door access controls and point-of-sale systems. There is also immediate time pressure: food retailers operate on slim margins, and goods spoil within a few hours. Any disruption therefore has a rapid and publicly visible effect.

For the ongoing investigations, the decisive question is whether the Belgian incidents were technically linked to the remote-hacking incident in France. It is already established that remote control, defrost mode and high temperatures coincided across several countries. It remains unclear who triggered the attacks, whether they were part of a coordinated campaign and how the security vulnerabilities were exploited.