Hackers Target Supermarket Refrigeration Systems Across Seven European Countries
Summary
Reported cyberattacks remotely accessed supermarket refrigeration systems across seven European countries, setting units to defrost and spoiling food. No group has claimed responsibility, and attribution to Russia remains speculation.
Key points
- The latest attacks reportedly affected retailers in Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands, and Sweden; some stores experienced spoiled food or closures.
- Belgian retailer Delhaize reported about 40 affected stores, while 13 SuperValu stores in Ireland reported being hacked.
- Some affected systems included refrigeration controllers of the same types targeted in earlier French attacks, including Danfoss, Copeland, and Dixell equipment.
- Danfoss said it had warned customers after the French incidents to ensure devices were not publicly exposed, especially because they contain a default password.
- No one has claimed responsibility. Suggestions of Russian involvement are expert speculation, not an established attribution.
- Sweden's National Cyber Security Center urged layered technical and organizational protections for operational technology; an industry expert advised isolating controllers from public internet access and corporate networks.
Article Details
- Victim Organization
- Supermarkets, grocery retailers, butcher shops, and smaller stores across Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands, and Sweden
- Incident Type
- Cyberattacks remotely accessed commercial refrigeration systems and set units to defrost.
- Operational Impact
- Food spoiled and refrigerated and frozen goods were removed or transferred. Some affected stores remained closed; retailers and technicians worked to disconnect affected installations and replenish stock.
- Ransom Or Extortion
- No ransom or extortion activity was reported. No one claimed responsibility for the attacks.
- Claim Status
- confirmed
People
Christophe HansenEuropean food and agriculture commissioner who characterized the repeated targeting of grocery stores as an attempt to disrupt the food supply chain and undermine consumer confidence.Engla IngwallSales manager at an affected ICA franchise store in Stockholm who reported that the store's freezers had been remotely set to defrost and gave the apparent start time.Ian Thornton-TrumpInversion6 CISO who said the attacks felt like a Russian operation while explicitly noting that they were not attributed to Russian threat actors.James NeilsonOpswat senior vice president of global sales who commented on IT/OT security gaps and recommended protections for retailers and food distributors.Stephan MoelansSabcobel CEO who described the response to affected refrigeration installations, including mobilizing technicians and disconnecting installations.
Vendors
CopelandResponse Team said those incidents involved the targeting of Danfoss AK-SC and AK-SM controllers, and Copeland and Dixell xweb controllers. The Sunday attacks involved hackers, at least in some cases, targeting theDanfossFrance's Computer Emergency Response Team said those incidents involved the targeting of Danfoss AK-SC and AK-SM controllers, and Copeland and Dixell xweb controllers. The Sunday attacks involved hackers, at least inDixellTeam said those incidents involved the targeting of Danfoss AK-SC and AK-SM controllers, and Copeland and Dixell xweb controllers. The Sunday attacks involved hackers, at least in some cases, targeting the same typesSabcobelAt least some of those affected stores use systems provided by Belgian refrigeration supplier Sabcobel. "We started mobilizing technicians at 1 a.m. to get the situation under control," Stephan Moelans, CEO of Sabcobel,
Products
Countries
BelgiumDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.EstoniaDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.FinlandDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.IrelandDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.LuxembourgDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.SwedenDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.the NetherlandsDozens of retailers appear to have been affected across seven countries: Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden.