Supermarket refrigeration systems across Europe have become an unlikely battleground for cybercriminals. In recent weeks, attacks have disrupted freezers in Belgium, Luxembourg, Estonia, the Netherlands, Ireland, and Sweden, with one Swedish store attributing the incident to a cyberattack. The strikes come on the heels of a major assault in France that affected between 500 and 700 supermarkets, where temperatures inside freezers reportedly soared to 50 degrees Celsius, destroying stock and raising alarms about the vulnerability of food supply chains.
Why are freezers connected to the internet?
The shift toward internet-connected refrigeration is driven by convenience. Store managers can monitor and adjust temperatures remotely through apps or cloud platforms, reducing the need for manual checks. However, this connectivity also creates an attack surface. Once a hacker gains access to a network, they can alter settings, lock out legitimate users, or shut down systems entirely.
Marta Rybczynska, founder of the cybersecurity firm Ygreky, told European Pulse that the lack of any claim of responsibility is telling. “It could mean the attackers are state-sponsored, or they may be testing capabilities for larger operations,” she said. “There’s no direct financial gain, which suggests motives beyond simple extortion.”
Rybczynska noted that the French authorities suspect international actors but have not made an official attribution. She added, “After the French attack, I considered the possibility of a group of young hackers, but the spread across multiple countries makes that less likely—unless they are copying a known method.”
Easy targets, outdated systems
The core issue, according to experts, is that many refrigeration systems are poorly protected. “They are easy targets because instructions on how to exploit them are readily available online,” Rybczynska said. “The bigger question is why now, and why the affected stores didn’t harden their systems after the French incident.”
Pavlina Pavlova, founder of Critical Cyber, echoed that sentiment. “These systems run on old, unpatched software. Many of the controllers hit in France were older models that no longer receive security updates, despite known vulnerabilities,” she said. “They are reachable and undefended, making them prime targets.”
The attacks have also highlighted a broader infrastructure problem. Supermarket chains often prioritize other security measures, such as payment systems, while overlooking operational technology like refrigeration. This oversight leaves critical systems exposed.
The AI factor
Looking ahead, experts warn that artificial intelligence could exacerbate the threat. AI can automate the discovery of vulnerabilities and execute attacks at a speed and scale that human hackers cannot match. “AI-driven vulnerability detection makes finding and exploiting weak points easier and faster than ever, including in vital functions on which people depend,” Pavlova said. “Meanwhile, patching at that speed remains a bottleneck for defenders.”
This concern is not hypothetical. Australia has already warned that AI is supercharging cyberattacks on critical systems, and European nations are taking note. Norway has reported a tripling of successful cyberattacks in just six months, a trend that could extend to other sectors.
The economic impact is tangible. A single attack on a Belgian supermarket chain caused an estimated €100,000 in spoiled goods, as reported earlier. Such losses, while significant for individual retailers, also raise concerns about food security and supply chain resilience.
Rybczynska stressed the urgency of action. “The big problem is that shops didn’t consider themselves as possible targets. There’s an urgent need to protect services that were previously deemed unimportant,” she said.
As Europe’s food retail sector becomes increasingly digitized, the line between physical and cyber threats blurs. The recent attacks serve as a wake-up call that even the most mundane infrastructure—like a supermarket freezer—can be a gateway for disruption. With AI poised to lower the barrier for sophisticated attacks, the question is not whether more incidents will occur, but how prepared the continent will be.
