On November 2, 2026, a coordinated cyberattack targeted refrigeration systems in supermarkets across Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia, and Finland. Hackers remotely switched the refrigeration units' evaporators to defrost mode, causing temperatures to rise to 50°C (122°F), resulting in significant food spoilage.
Major supermarket chains affected by the attack include Ahold Delhaize, Colruyt, ICA, Coop, and SuperValu. Approximately 40 Delhaize stores and 13 SuperValu locations were impacted. In Belgium, the attack affected approximately 40 Delhaize stores, 15 Carrefour stores, around 15 Intermarché stores, and five Spar Colruyt outlets.
In Sweden, ICA and Coop reported similar disruptions, with ICA Kvantum in Sjöbo confirming that freezer settings had been changed to +50°C. In Estonia, a Selver supermarket was attacked, with hackers accessing a computer controlling refrigeration and changing a freezer setting to 50 degrees. The attack on Selver was identified quickly, and no damage was reported due to prompt response.
The attack method mirrors a previous incident in France from October 2026, where similar vulnerabilities were exploited. The refrigeration contractor Sabcobel reported that at least twenty units were affected across Belgium.
The identity of the attackers remains unknown, and no group has claimed responsibility for the attacks. Cybersecurity experts stress the need for improved security measures for operational technology devices following these incidents.