🔍 Read the full analysis: A Closer Look At AI And The Threat To Supermarket Freezers on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Refrigeration systems at more than 115 supermarkets and other businesses in at least six European countries were reportedly disrupted overnight from November 1 to 2. Retailers and authorities describe a pattern resembling an October attack in France, but responsibility and any role for AI remain unconfirmed.
Refrigeration systems at more than 115 stores in at least six European countries were disrupted overnight from November 1 to 2, according to reports compiled by BleepingComputer and national media. Retailers said some units were switched into defrost or heating modes, putting frozen and chilled food at risk; authorities have not identified who was responsible or confirmed any use of artificial intelligence.
Reports described affected businesses in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia, with Finnish authorities and retailer Kesko also reporting temperature problems at a few smaller stores. The counts differ by source and may include different kinds of businesses. BleepingComputer put the total above 115, while The Record reported more than 50 affected stores in Belgium alone.
Belgian refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that evaporators at affected sites had been switched remotely into defrost mode. He said the mechanism was the same as in France during an incident on October 11–12. Moelans told The Record that about 20 of the several hundred installations his company manages in Belgium were affected. He said Sabcobel itself was not hacked; the store controllers were reached directly over the internet.
Retailers described damage ranging from partial disruption to spoiled stock. A Proxy Delhaize store in Hoepertingen estimated that it had to discard food worth at least €60,000, according to local reporting cited by VRT NWS. Carrefour Belgium said 15 of its 700 stores were affected, while Coop Sweden reported problems at seven stores out of more than 800. In Ireland, reports listed 13 SuperValu stores; in the Netherlands, a Danfoss spokesperson told NOS that systems at at least 17 businesses were hit.
Food Loss and Exposed Store Systems
The incidents show how a cyber disruption to building equipment can quickly become a food-safety and business-loss problem. When freezers warm, stores may need to discard stock, close affected units or bring in technicians. In Hoepertingen, the reported estimate of discarded food reached at least €60,000; other businesses also reported losses, though a complete tally is not available.
The reports point to a particular exposure: some affected shops were outside retailers’ central networks or relied on separate, older refrigeration equipment. That can leave independently operated stores with fewer shared safeguards or less centralized oversight. It does not establish that every independent shop is vulnerable, or that central networks prevented all incidents. It does make the security of internet-connected refrigeration controls a practical concern for retailers, equipment owners and service providers.
The incidents also matter because the reported pattern followed a similar event in France only weeks earlier. If the same access weakness is present at more sites, additional businesses could face disruption. That risk is a reason for operators to review remote access and system updates, but the available reports do not establish how many systems remain exposed or whether the reported incidents share one operator.
Products Worth Considering
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
Samsung 27-inch Odyssey G5 QHD Gaming Monitor (G51F)
Samsung 27-Inch Odyssey OLED G5 QHD Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Similar French Attack in October
On October 11–12, refrigeration systems at hundreds of French supermarkets were reportedly manipulated. France’s Paris prosecutor’s office counted about 700 victims, according to the source material. France’s national cybersecurity agency, CERT-FR, warned on October 12 that remote management interfaces for refrigeration controllers had been exposed online in ways that did not follow good practice. It said attack campaigns were probably still ongoing.
The new reports describe a similar outcome, but that alone does not prove a common perpetrator or a single coordinated campaign. Belgium’s federal prosecutor has opened a criminal investigation. The Belgian installer Sabcobel said affected controllers were reachable from the internet; Finland’s National Cyber Security Centre said attacks there and elsewhere targeted specific Danfoss models, as reported by the Finnish news agency STT. The source material does not establish that all affected stores used the same equipment or access configuration.
Reports differ on both the number of sites and the temperatures recorded. Examples include 50°C at a Delhaize store in Eeklo, 15°C at the Hoepertingen store and 17°C in some Belgian units, as reported by different outlets. These are reported site-level readings, not a single temperature for all affected stores. The overall count is also unsettled: news organizations use different totals and scopes, so the figures should not be treated as a final verified count.
“The evaporators were switched into defrost mode remotely, “exactly the same” mechanism as in France.”
— Stephan Moelans, chief executive of refrigeration installer Sabcobel, as quoted by Belgian media
Who Was Behind the Disruption?
No group has claimed responsibility, and the source material provides no attribution by investigators. Belgium’s federal prosecutor has opened a criminal investigation, while the Belgian cyber centre has warned that an attacker may never be identified. Similar methods or timing do not, by themselves, establish who carried out the incidents or whether the French and later disruptions were connected.
AI involvement is unconfirmed. Belgium’s cyber centre has warned more broadly about a rise in attacks that partly involve AI, but no authority or retailer cited in the reports said AI was used in these refrigeration incidents. A video accompanying the original source was described as using an AI-generated narration voice and images; that production detail is not evidence that AI played a role in the attacks.
The exact number of affected businesses, total value of spoiled food and full extent of disrupted equipment also remain unclear. Published counts vary, and reports describe both supermarkets and smaller businesses. It is not yet clear whether all reported temperature problems were caused by the same technique, how controllers were accessed in each case, or how many sites may still be exposed.
Investigations and Store Checks Continue
Belgium’s criminal investigation is ongoing. Retailers and affected businesses will need to establish which refrigeration units were compromised, whether food remained safe and what equipment or access controls require attention. Public reporting may add to the current totals as operators check systems and assess losses.
France’s CERT-FR had warned after the October incident that exposed remote interfaces could leave refrigeration systems at risk. The latest reports make remote access and controller security a focus for operators and equipment providers, but they do not say what specific corrective steps have been completed across affected countries. Authorities have not announced a final cross-border count or public attribution.
The next confirmed milestones are likely to come from investigators, national cybersecurity agencies and retailers as they release findings or update store counts. Until then, the reported resemblance to the French case should be treated as a lead for investigation, not proof of a single campaign, and claims about AI should remain unverified.
Key Questions
How many stores were affected?
BleepingComputer reported more than 115 stores across at least six countries. Other reports give different totals and scopes, and Finnish authorities and Kesko also reported issues at a few smaller stores. A final count has not been established.
What happened to the refrigeration systems?
Sabcobel said affected evaporators were remotely switched into defrost mode. Store reports described units warming or producing heat, but the available accounts do not confirm an identical technical sequence at every site.
Has anyone been identified as responsible?
No. The source material reports no attribution and no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation.
Was artificial intelligence used in the attacks?
That is not known. Officials have discussed AI in warnings about cyberattacks generally, but no cited authority or retailer has said AI was used in these incidents.
Why were some smaller stores affected?
Retailers said some affected locations operated outside central networks or used their own refrigeration systems. The reports do not establish that this was the cause in every case or explain the access route for each affected controller.
Source: ThorstenMeyerAI.com
