In brief
A cyber incident affecting refrigeration systems at 13 Irish SuperValu stores and similar problems in Sweden, Belgium, and Luxembourg has led to the removal of chilled and frozen products from multiple supermarkets across Europe. SuperValu, Axfood, ICA, Coop, Delhaize, and Colruyt are investigating the breaches alongside equipment suppliers and cybersecurity specialists, while authorities probe whether the attacks are linked to a major French incident last October.
A cyber incident struck 13 Irish SuperValu stores on Monday, forcing shoppers at the chain’s outlets to be told that their chilled and frozen goods had been removed for safety.
Musgrave Group, which owns the SuperValu brand, said the problem was limited to a particular model of refrigeration equipment. The company’s spokesperson explained that monitoring systems picked up the irregularity and staff acted promptly to remove perishable food products, although other items remained unaffected.
Our monitoring systems alerted us to the issue and we took immediate action, a company spokesperson said, adding that other products remained available as normal.
After the Irish incident, superstores in Sweden shuddered as their cooling systems failed. Axfood, a grocery chain that operates a distribution centre for home‑delivery groceries, reported that its freezers had been hacked. Other Swedish chains, ICA and Coop, noted overnight temperature spikes inside their refrigerated displays. Six Coop stores were affected, whereas ICA said only a handful of locations were hit, with one outlet experiencing temperatures set to 50 degrees Celsius following a suspected attack.
Across the border in Belgium and Luxembourg the situation mirrored that in Sweden. Delhaize, part of the Dutch‑Belgian group Ahold Delhaize, said an IT incident had impacted refrigeration at dozens of its stores. The Belgian retailer Colruyt Group reported that five Spar supermarkets had their cooling systems compromised. All affected chains said they were working with equipment suppliers and cybersecurity firms to investigate the cause and restore normal function.
The waves of disruptions hit no fewer than seven supermarket chains, all of which urged consumers to check the temperature of foods before handling or selling them. At the time of the reports, no food had been confirmed to have spoiled, but the precautionary removal of perishable goods caused a scramble for alternative storage solutions in the affected stores.
The attacks follow a significant incident in France last October, when hackers took control of refrigeration systems at hundreds of supermarkets, causing temperatures to rise sharply. French police said the breach led to substantial food losses and, in a few cases, fires. As of now, authorities have not determined whether the latest pan‑European incidents are connected to that French breach or to one another.
SuperValu, sitting under Ireland’s Musgrave Group, is working closely with the equipment manufacturer and cybersecurity specialists to understand the flaw that allowed a remote takeover of the cooling units. The company has urged other retailers that use the same refrigeration models to reinforce their network security and to monitor temperature changes closely.
In Sweden, the distribution centre that handled home deliveries for Axfood experienced a breakdown that forced the firm to pause that service for the day until the refrigeration could be brought back online. The incident highlighted the dependence of modern delivery services on stable cold-chain logistics, and the potential for cyber threats to disrupt not only in‑store sales but also digital‑order fulfilment.
European food safety regulators are watching closely. While no regulatory body has yet issued a formal warning, the repeated nature of the breaches is prompting calls for stricter cybersecurity standards in the food retail sector. Experts point out that refrigeration systems, once used largely as isolated appliances, now rely on networked sensors and digital controls that make them vulnerable to malicious code.
Meanwhile, the supermarkets with known breaches are extolling the need for vigilance. A spokesperson for Delhaize said the chain’s IT team was actively collaborating with law enforcement and the manufacturer’s cybersecurity unit to investigate the attack. “We are sharing information with the authorities and taking steps to bolster our security policies,” the spokesperson added. By the evening of November 2, after initial remediation had begun, some of the stores were able to reopen their refrigerated sections, though they continued to monitor the systems closely in case further anomalies emerged.
In the wake of these cyberattacks, shoppers across several countries were urged to inspect the condition of their groceries and, when in doubt, to return expired or suspicious items. The incidents serve as a stark reminder of how dependent the food supply chain is on digital infrastructure, and how quickly a targeted cyber incident can ripple through everyday commercial operations.
