Belgian supermarkets are counting the cost of a cyberattack that disrupted refrigeration systems in dozens of stores, forcing them to discard an estimated €100,000 worth of perishable goods. The attack, which came to light on Monday, affected major chains including Delhaize, Carrefour, and Spar, as well as the butchery group De Laet en Van Haver.
According to Belgian media reports, the attackers remotely manipulated the temperature settings of refrigerators and freezers, in some cases raising them to a scorching 70 degrees Celsius. This caused significant spoilage of meat, dairy, and other temperature-sensitive products, prompting retailers to throw away large quantities of stock.
Scope of the attack
Delhaize, one of Belgium's largest supermarket groups, confirmed that around 40 of its stores were affected. A spokesperson for the company told Euronews: "We have identified an IT incident affecting the refrigeration systems in several dozen stores. We immediately took the necessary measures to keep our stores operational."
Carrefour reported that at least 15 of its Belgian outlets were impacted, while Spar said five stores had been affected. The butchery group De Laet en Van Haver also acknowledged that its refrigeration units had been compromised. The exact method of the attack has not yet been disclosed, but it appears to have targeted the internet-connected systems that manage store climate controls.
This incident follows a similar cyberattack in France just weeks ago, raising concerns about the vulnerability of retail infrastructure across Europe. As supermarkets increasingly rely on networked systems for everything from inventory to temperature monitoring, the potential for such disruptions grows.
The Belgian authorities have not yet named any suspects, and it remains unclear whether the attack was financially motivated, politically driven, or simply an act of sabotage. Cybersecurity experts note that attacks on critical infrastructure, including food supply chains, have been on the rise, with Norway reporting a tripling of successful cyberattacks in just six months.
For Belgian consumers, the immediate impact was limited to empty shelves and some inconvenience, but the financial toll on retailers is significant. Beyond the direct loss of spoiled goods, stores had to deploy staff to manually check temperatures and dispose of affected products, adding to the operational strain.
This is not the first time Belgium has faced cyber trouble. Earlier this year, the country's tax portal MyMinfin was taken offline after a cyberattack on the FOD Financiën, the federal public service for finance. That incident disrupted access to tax filings and payments, highlighting the growing threat to both public and private sector systems.
Retailers are now reviewing their cybersecurity measures, particularly for internet-of-things (IoT) devices like smart fridges and freezers, which are often less protected than core IT systems. Experts warn that as more devices become connected, the attack surface expands, making it easier for malicious actors to cause physical damage remotely.
The Belgian supermarket association has called for a coordinated response from the government and the private sector to strengthen the resilience of critical retail infrastructure. Meanwhile, the affected chains are working to restore normal operations and reassure customers that food safety has not been compromised.
This incident serves as a stark reminder that cyberattacks are no longer just about data breaches; they can have tangible, physical consequences. As Europe's retail sector becomes more digitized, the need for robust cybersecurity protocols has never been more urgent.
