A series of cyberattacks targeting supermarket refrigeration systems has disrupted stores across nine European countries, from Belgium to Sicily. While the incidents have caused spoiled food and empty shelves, cybersecurity experts say the attacks are far from sophisticated.
Kevin Curran, Professor of Cybersecurity at Ulster University, told European Pulse that the attackers exploited basic weaknesses in internet-connected refrigeration units. “This is not a highly advanced operation,” he said. “It is more like someone finding an open door and walking in.”
How the attacks unfolded
The attacks, which have hit retailers in Belgium, Germany, France, Italy, and elsewhere, involved hackers gaining access to the systems that control freezer and fridge temperatures. In some cases, they remotely altered settings, causing food to thaw or spoil. In Belgium, one supermarket chain reported losses of around €100,000 in damaged goods.
Curran explained that many commercial refrigeration units are connected to the internet for remote monitoring and maintenance, but often lack basic security measures. “Manufacturers prioritise convenience and cost over security,” he said. “Default passwords, unpatched software, and open ports are common.”
The attacks have raised concerns about the broader vulnerability of critical infrastructure. In the UK, the head of the National Cyber Security Centre recently warned that AI-driven cyberattacks on critical infrastructure could become a reality by 2028.
Not a sophisticated threat, but a serious one
Despite the low technical complexity, the impact is real. Supermarkets in Sicily, including Coop stores, were forced to discard large quantities of perishable goods. The disruption also affected supply chains, with some stores unable to restock frozen items for days.
Curran stressed that the attacks should serve as a wake-up call for the retail sector. “The threat is not just about frozen peas,” he said. “If a hacker can take down a supermarket's refrigeration, they can also target other connected systems, from payment terminals to security cameras.”
The incidents come amid a broader wave of cyberattacks on European institutions. French blood banks recently repelled a cyberattack targeting cold storage, and Crédit Mutuel Arkéa confirmed an attack on its systems. Even air raid alert apps in Ukraine and Russia have been hit by cyberattacks as a truce expires.
What can be done?
Curran recommends that retailers conduct regular security audits of their IoT devices, change default credentials, and segment networks so that a breach in one system does not compromise the entire operation. He also called for stronger regulation and industry standards.
“We need to move from a culture of ‘set and forget’ to one of continuous monitoring,” he said. “The technology is not inherently insecure, but it is often deployed without proper safeguards.”
As European supermarkets recover from the disruption, the episode underscores a growing reality: cyberattacks are no longer just a threat to data, but to the physical infrastructure that keeps everyday life running.
