🔍 Read the full analysis: AI And The Security Of Europe’s Supermarket Freezers on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Refrigeration systems at more than 115 stores across at least six countries were reportedly switched into defrost or heating modes overnight on Nov. 1–2, spoiling food and disrupting businesses. Authorities and companies link the method to a French incident in October, but the attacker’s identity and whether AI was used remain unknown.
Refrigeration systems at more than 115 stores across at least six European countries were reportedly disrupted overnight on Nov. 1–2 after controllers were switched into defrost or heating modes, damaging food and forcing some shops to shut down or discard stock. The incidents, reported in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia, resemble attacks on French supermarkets in October; the perpetrators have not been identified, and no evidence provided so far establishes that artificial intelligence was used.
Retailers and media outlets reported affected sites in several countries, although totals and individual counts vary. BleepingComputer reported more than 115 stores in at least six countries. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller Finnish stores, putting the geographic reach beyond that six-country count. The reports do not establish a single definitive total.
In Belgium, refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that technicians began disconnecting installations from about 1 a.m. He said roughly 20 of the several hundred systems his company manages in the country were affected, and that Sabcobel itself was not hacked: the internet-reachable controllers at stores were targeted. The installer described the mechanism as the same as in France, where the Paris prosecutor’s office has counted about 700 victims from the October incident.
Reported damage varied by location. VRT NWS reported that freezers at a Proxy Delhaize in Hoepertingen reached 15 °C rather than the usual minus 22 °C; the shop estimated at least €60,000 in discarded food, according to Het Belang van Limburg as cited by VRT. Other stores caught the change sooner: a butcher in Antwerp noticed tampering around 3 a.m. and stopped its systems in time, VRT reported. Temperatures differed across incidents, with reports ranging from 15 °C to 50 °C.
Companies described disruptions at individual sites, many of them independently operated or outside centrally managed networks. Ahold Delhaize told BleepingComputer it had identified an IT incident affecting refrigeration systems in several dozen stores; the outlet put the number at about 40 in Belgium and Luxembourg. Carrefour Belgium said 15 of its 700 stores were affected, but no hypermarkets. Coop Sweden reported seven affected stores out of more than 800, while ICA reported at least four. Other reported cases included 13 SuperValu stores in Ireland, one Selver store in Estonia, and at least 17 businesses in the Netherlands, according to a Danfoss spokesperson quoted by NOS.
AI And The Security Of Europe’s Supermarket Freezers
Refrigeration controllers at stores across Europe were reportedly switched into defrost or heating modes overnight on Nov. 1–2. Food was spoiled and businesses disrupted. The method is linked in reports to an October incident in France; who carried out the attacks—and whether AI was involved—remains unknown.
One night, multiple markets
Media and retailers described incidents across several countries. Counts vary by source and may change as individual sites are checked. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores, extending the reported reach beyond the initial six-country count.
At least six countries
Reports named Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Additional anomalies were reported in Finland.
Heat where cold was needed
Reported temperatures ranged from 15 °C to 50 °C. A Proxy Delhaize freezer in Hoepertingen reportedly reached 15 °C instead of about −22 °C.
Stock loss and shutdowns
Some shops discarded food or temporarily closed. A butcher in Antwerp reportedly noticed tampering around 3 a.m. and stopped systems in time.
Estimates differ by retailer
These are reported figures, not a reconciled European inventory. Some counts cover particular brands or regions; totals should be treated as provisional.
| Retailer or source | Reported impact | Context |
|---|---|---|
| Ahold Delhaize | Several dozen | BleepingComputer put the number at about 40 stores in Belgium and Luxembourg. |
| Carrefour Belgium | 15 of 700 | Reported across Flanders and Wallonia; no hypermarkets affected. |
| Coop Sweden | 7 stores | Out of more than 800 stores, according to reports. |
| ICA | At least 4 | Reported affected stores in Sweden. |
| SuperValu · Ireland | 13 stores | Reported by Irish media. |
| Netherlands · Danfoss source | 17+ businesses | A Danfoss spokesperson was quoted by NOS. |
From controller change to store disruption
Reports describe remote changes to refrigeration operating modes. The full access route has not been publicly established for every incident.
Remote access
Internet-reachable refrigeration controllers were reportedly targeted at stores.
Mode switched
Systems were changed to defrost or heating modes, according to incident accounts.
Temperature rises
Freezers warmed, putting perishable stock at risk and requiring checks or intervention.
Commercial fallout
Reported outcomes included discarded food, lost sales and temporary store disruption.
A reported link to France; key questions remain
France, October
Attacks on supermarket refrigeration systems were reported overnight on Oct. 11–12. CERT-FR warned that remote management interfaces had been exposed online contrary to good practice, and said campaigns were probably ongoing.
Same method, according to sources
Belgian installer Sabcobel described the later incidents as using the same mechanism as France: remotely changing refrigeration equipment’s operating mode. Finnish authorities cited targeted Danfoss models.
Identity, coordination and AI
No attacker has been named and no claim of responsibility is reported. No cited authority or retailer has confirmed AI use or established that all incidents shared one operator.
What the reports do not establish: a definitive Europe-wide store count, a single confirmed entry point, a nationwide food shortage, a confirmed public health incident, or AI involvement in this campaign.
Building systems are part of retail security
Digital access can spoil food
Refrigeration is essential to keeping perishable goods safe. A controller change can translate into lost stock, sales and operating time.
Not every site shares central controls
Some affected businesses were independently run or used equipment outside a retailer’s centrally managed network. Central security may not cover separately managed systems.
Establish scope before conclusions
Retailers and authorities are checking systems, isolating equipment and assessing repairs. The technical pathway, food losses and any rule breaches remain to be determined.
Risks to Food and Store Operations
The incidents show how a digital intrusion can cause direct physical and commercial harm without an attacker entering a store. Refrigeration is essential to keeping perishable food safe; when a controller changes a freezer’s operating mode, businesses may face spoiled stock, lost sales and temporary disruption. In Hoepertingen, the reported estimate for discarded food alone was at least €60,000.
The reported pattern also points to uneven protection across retail businesses. Some affected stores were independently run, operated outside a chain’s central network, or used their own refrigeration equipment. That distinction matters because a retailer’s central security controls may not cover equipment managed separately at a franchise or smaller shop. Reports of affected older systems are not proof that age alone caused the incidents, but they underline the exposure created by internet-accessible building controllers.
For customers, the immediate concern is local disruption and availability of chilled or frozen goods, rather than evidence of a wider impact on the food supply. The source material does not report a national shortage or a confirmed public health incident. Retailers and authorities will need to establish the scale of losses and whether any food safety rules were breached before broader conclusions can be drawn.
Popular right now
De'Longhi Magnifica XS ECAM22110B Automatic Espresso Machine
Dyson V8 Cyclone Cordless Vacuum
Bose QuietComfort Wireless Noise-Cancelling Headphones, Petal Pink
As an affiliate, we earn on qualifying purchases.
From French Stores to a Wider Wave
The latest reports follow attacks on refrigeration systems at supermarkets in France during the night of Oct. 11–12. France’s cybersecurity agency, CERT-FR, warned on Oct. 12 that remote management interfaces for refrigeration controllers had been exposed online contrary to good practice. It said attack campaigns were “probably still ongoing.” The Paris prosecutor’s office has counted about 700 victims in the French case, according to the source material.
Belgian installer Sabcobel said the later incidents used the same mechanism as the French wave: remotely changing the operating mode of refrigeration equipment. Finland’s National Cyber Security Centre said the attacks there and elsewhere targeted specific Danfoss models, according to Finnish news agency STT. Those statements provide a reported technical link, but do not establish that every incident involved the same operator or precise access route.
Counts remain difficult to reconcile. BleepingComputer cited more than 115 stores across six countries, while Belgian outlet reports gave different totals and ranges. The reported national figures should be treated as estimates that may change as retailers and authorities check individual sites. The source material also describes damage at particular businesses, not a fully verified European-wide inventory.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Who Accessed the Controllers
No attacker has been named, and the source material reports no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation. Belgium’s cyber centre has warned that the attacker may never be identified. Investigators have not publicly established whether the cases in different countries were coordinated by one actor.
Although the method has been compared with the October attacks in France, the available accounts do not provide a complete technical account of how access was obtained at each store. Exposed remote-management interfaces were the subject of CERT-FR’s warning, but that does not by itself confirm the entry point in every incident reported in November.
AI involvement is also unconfirmed. Belgium’s cyber centre has discussed a general rise in attacks that partly involve AI, but no authority or retailer cited in the source material has said AI was used in this campaign. Reported store totals, damage estimates and temperature readings also differ and remain subject to verification.
Investigations and Store Checks
Belgian prosecutors are investigating, while affected retailers and refrigeration specialists are checking systems, isolating equipment and determining which stores need repairs. Authorities and companies have not provided a common timeline for completing those checks or a final count of affected sites.
The next useful updates are likely to clarify the incident’s technical pathway, whether the same controller models or access weaknesses were involved across countries, and how much food was lost. Retailers will also need to establish whether affected equipment was connected to central networks or managed independently. Until investigators publish those findings, the connection to the French incidents remains a reported similarity in method rather than proof of a shared perpetrator.
Key Questions
How many stores were affected?
More than 115 stores across at least six countries were reported affected by BleepingComputer. Other outlet and company counts differ, and Finnish authorities and Kesko also reported problems at a few smaller stores, so there is no final verified total.
What happened to the refrigeration systems?
Reports say controllers were remotely switched into defrost or heating modes, raising temperatures in freezers and cold rooms. The detailed access route has not been confirmed for every store.
Is this linked to the October attacks in France?
Sabcobel said the mechanism was the same as in France, where the Paris prosecutor’s office has counted about 700 victims. That reported similarity does not prove the same attacker was responsible for both incidents.
Was artificial intelligence used?
That has not been established. The source material contains no statement from authorities or retailers confirming AI use in these attacks.
What should customers expect?
Some affected shops may have disrupted refrigeration or reduced stock while systems are checked. The reports do not establish a wider food shortage or a confirmed public health impact.
Source: ThorstenMeyerAI.com
