Supermarket chains Ahold Delhaize (AD.AS), opens new tab and Colruyt (COLR.BR), opens new tab said an IT incident overnight hit fridges and freezers in dozens of stores in Belgium and Luxembourg, while Swedish grocers ICA and Coop reported similar temperature spikes.
The Misinformation Monitor newsletter rounds up international misinformation narratives, with a “Real or Fake?” quiz in every edition. Sign up here.
“There has been a cyberattack and all our freezers reached 50 degrees (Celsius),” Engla Ingwall, sales manager at an ICA franchise store in Stockholm, told Reuters, adding the attack occurred at 2 a.m. (0100 GMT) but was only noticed hours later.
“Everything is destroyed.”
A spokesperson at privately held ICA said in an emailed statement that the company was aware that a “limited number of stores were affected by an incident overnight, which impacted their refrigeration and freezer systems”.
The latest incidents follow an attack in France last month, in which police said hackers seized control of cooling units at hundreds of supermarkets, causing fires and food losses. Ahold also reported a cybersecurity incident to police last month.
While no-one has claimed responsibility for either attack, the cases have put a spotlight on rising anxiety among regional authorities over hybrid attacks spreading from conflicts on European borders after Russia’s 2022 invasion of Ukraine.
Moscow has repeatedly denied involvement in any sabotage or hybrid warfare operations. Reuters was unable to establish who was behind Monday’s attacks, or if there was any link to the October ones in France.
Sweden’s national cybersecurity centre – which said it could not speculate on who was behind the attacks – is working on several incidents affecting grocery stores across the country, the head of the centre, John Billow, said on Monday.
“We have in recent weeks… identified we have quite a lot of exposed operational technology devices in Sweden that we have been clear about the necessity to update or patch,” he said.
From refrigerators and heating systems to security cameras and alarm networks, an expanding range of devices once largely mechanical can now be monitored and controlled remotely, creating new opportunities for cybercriminals.
Stephan Moelans, CEO of Belgian refrigeration firm Sabcobel, which operates Delhaize’s systems, told the Belga news agency the incident was a cyberattack, with units’ evaporators switched to defrost mode. Moelans’ office declined to comment.
“I’ve been awake since 2 a.m. We’ve been working all night and morning to disconnect the affected units from the network,” Moelans told Belga.
A spokesperson for Colruyt Group, which operates Spar stores in Belgium under a franchise system, said five shops had their fridge systems attacked.
Item 1 of 5 Freezers are emptied, and frozen goods are loaded into shopping carts to be thrown away at ICA Kvantum in Sjobo, Sweden November 2, 2026, after a hacker attack raised the temperature in the freezers to 50 degrees Celcius. Johan Nilsson/TT News Agency/via REUTERS
[1/5]Freezers are emptied, and frozen goods are loaded into shopping carts to be thrown away at ICA Kvantum in Sjobo, Sweden November 2, 2026, after a hacker attack raised the temperature in the freezers to 50 degrees Celcius. Johan Nilsson/TT News Agency/via REUTERS Purchase Licensing Rights, opens new tab
In Ireland, food wholesaler Musgrave said that a cyber incident had affected refrigeration systems in 13 of its SuperValu stores, forcing it to remove some chilled and frozen products from sale.
“Our monitoring systems alerted us to the issue and we took immediate action,” it said in a statement. “Our investigation is ongoing.”
Tom Hegel, a researcher at cybersecurity firm SentinelOne, said that attacks.
