Hackers Melt Groceries – Three Countries Hit

Woman opening a supermarket freezer door — Photo: LADO / Shutterstock

Suspected hackers remotely raised supermarket freezer temperatures across Belgium, Luxembourg, and Sweden, risking food safety and exposing weak critical systems.

Story Highlights

Retailers in three countries reported overnight, unauthorized temperature changes in store coolers.
French prosecutors are probing a similar, larger October incident that hit hundreds of stores.
Reports describe remote manipulation consistent with insecure, internet-connected controllers.
Companies have not confirmed a common culprit or toolset across the incidents.

What Happened Across Belgium, Luxembourg, and Sweden

Retail groups reported overnight changes to refrigeration settings in Belgium, Luxembourg, and Sweden. Ahold Delhaize, the parent of Delhaize, said someone tampered with cooler temperatures in Belgium and Luxembourg, calling it an “IT incident.” In Sweden, ICA reported an overnight event at a limited number of stores. Coop Sweden said six stores had refrigeration problems. Investigations are ongoing, and companies have not named a cause or an attacker yet.

Belgian press noted dozens of Delhaize locations and several Carrefour Belgium sites with issues, while causes remained unconfirmed. The pattern involved remote changes to set points, which suggests access to control systems, not a routine power blip. Still, the firms stopped short of calling it a confirmed cyberattack. That careful language reflects legal and insurance stakes while technicians check logs and hardware models involved in each case.

Link to the Earlier French Attack: Similar Tactics, Not Proven Ties

French authorities opened a cybercrime probe after a mid-October event that reportedly defrosted or overheated equipment at hundreds of supermarkets across several chains. Media and security reports tied that event to older refrigeration controllers that lacked current security updates. That showed how remote access to operational technology can spoil food and disrupt daily life. However, no technical or operational link to the newer events has been proven so far.

Security reporting described remote control of refrigeration systems, with temperatures raised through networked interfaces. French computer emergency teams reportedly flagged compromises in legacy controller families made by major vendors. Those devices often run for many years and can be hard to patch or replace. That creates a real attack surface in many countries. The three-country episode fits that risk pattern, but investigators have not confirmed the same products or exploits this time.

Why This Matters to Consumers and Communities

Food safety depends on stable cold-chain temperatures. A small set-point change can ruin meat, dairy, and medicine. Store managers in France cut power to systems and unplugged gear to stop further remote access. That response shows how operators viewed internet connections as the threat vector, not just a local equipment fault. When a single login can warm hundreds of cases, families pay more at checkout and waste piles up in dumpsters.

The situation this morning in Europe:

A cyberattack is disrupting supermarket refrigeration systems across several European countries, including Sweden, Belgium, Luxembourg, Estonia and Ireland.

• What is happening: A vulnerability in specific refrigeration control software is…

— GeoInsider (@InsiderGeo) November 2, 2026

Conservatives have warned for years about fragile systems tied to the internet without proper safeguards. This is not about flashy gadgets. It is about simple building controls with outdated software left exposed. Retailers are now investigating, but the lesson is clear. Critical gear must default to safe, local control with strong passwords, network isolation, and fast patch plans. That is basic stewardship, and it protects both small businesses and the families they serve.

What Officials and Retailers Are Confirming—and What They Are Not

Retailers confirmed suspicious temperature changes and service disruption. They have not confirmed a shared attacker, a shared toolset, or a link to France. Reports make clear that Belgium and Sweden saw overnight events, while Sweden’s ICA and Coop described limited scope. Delhaize said the issue was under investigation and did not label it a confirmed hack. Those limits matter. Facts show remote manipulation is plausible; proof of one campaign across countries is not in hand.

Readers should weigh the evidence with care. Numbers tied to France do not apply to Belgium, Luxembourg, or Sweden unless investigators say so. Companies must release technical findings, including controller models, firmware, and access logs. National cyber teams should share indicators so others can defend networks. That is how we move from fear to fixes. Until then, the safest view is targeted tampering is suspected, but attribution and exact method remain open questions.

What Needs to Happen Next

Store chains should audit every refrigeration controller, update or replace legacy units, and lock down remote access. Vendors must publish clear security guides and lifecycle plans so buyers are not stuck with unpatchable gear. Governments should push for minimum security on operational technology that touches food and health. Parents and seniors should not lose groceries because someone found a default password online. Practical steps now will stop bigger losses later.