A second wave of cyber-attacks targeting refrigeration systems has hit supermarkets across Europe, causing freezer failures in several countries. The incident affected stores in Belgium, Estonia, Ireland, Luxembourg, and Sweden, with some retailers confirming that the issue was a cyberattack. This latest incident follows a similar attack that struck France three weeks earlier.
Swedish retail chains ICA and Coop reported that a limited number of their stores were affected, with Coop confirming that six of its roughly 800 outlets experienced issues with fridges and freezers. The problems ranged from complete system failures to partial operation, with Coop stating that it had not yet received confirmation that the cause was a cyberattack. ICA, however, confirmed that it was investigating the scale of the incident.
Other European retailers also reported issues with their refrigeration systems. Dutch retailer Ahold Delhaize cited an overnight IT incident that disrupted freezers in several Belgian and Luxembourg stores. In Ireland, public broadcaster RTE identified 13 supermarkets affected by the same issue, with retailers such as Carrefour, Intermarché, and Spar also targeted.
Carrefour's Belgium spokesperson confirmed that the incident was a cyberattack and ruled out other explanations. The company's spokesperson emphasized that the incident was a deliberate attempt to disrupt operations. In response to the incidents, Belgium's prosecutor's office has opened a criminal investigation into the attacks.
European Commissioner for Agriculture and Food Christophe Hansen described the incidents as a deliberate attempt to disrupt Europe's food supplies. While food security is not currently at risk, Hansen noted that the incidents could have real impacts on waste and business operations. A Commission spokesperson added that the events illustrate how cyberattacks can affect services, businesses, and citizens' daily lives.
The Swedish National Cybersecurity Center, led by John Billow, is investigating the incidents and highlighted the prevalence of exposed operational technology devices, including refrigeration units, that require updates or patches. The center's efforts aim to identify the root cause of the incidents and prevent similar attacks in the future.
The incidents have raised concerns about the vulnerability of critical infrastructure to cyberattacks. As the investigation continues, retailers and authorities are working to minimize the impact on customers and restore normal operations. The incidents serve as a reminder of the importance of robust cybersecurity measures to protect against such attacks.
Key points
- European supermarkets face a second wave of cyber-attacks targeting refrigeration systems
- The incidents have raised concerns about the vulnerability of critical infrastructure to cyberattacks
- Authorities are investigating the incidents and working to prevent similar attacks in the future