EU to review supermarket cybersecurity after attacks disrupt cooling systems in six countries

Cyberattacks disrupt supermarket cooling systems across six EU countries

The European Commission will review cybersecurity defenses in supermarkets after cooling systems failed in dozens of stores across Sweden, Belgium, Luxembourg, Ireland, Estonia, and the Netherlands. The attacks, which occurred earlier this week, caused refrigeration units to switch into defrost mode, leading to temperatures as high as 50°C and significant disruptions.

Retailers affected include Ahold Delhaize, Colruyt, Carrefour, ICA, Coop, SuperValu, and one IKEA store in Belgium. According to Sabcobel, the Belgian company managing cooling systems for Delhaize and other retailers, attackers exploited vulnerabilities to trigger the defrost mode in refrigeration units.

The incidents mirror similar attacks in France last month, where hackers targeted Danfoss-made control systems in hundreds of stores. Those attacks resulted in food spoilage and, in some cases, fires. Intermarché’s chief executive estimated the damage could run into millions of euros.

EU response and broader implications

The European Commission’s Security College, established in March 2025 by Commission President Ursula von der Leyen, will lead the review. The College will assess retailers’ backup arrangements and their ability to respond to disruptions. No date has been set for the meeting, but cabinet chiefs have agreed it should take place soon.

Christophe Hansen, the Commission’s agriculture and food commissioner, described the attacks as "deeply concerning," citing economic losses for retailers and empty shelves for consumers. The Commission is also considering whether these attacks could be part of a broader pattern of hybrid threats aimed at disrupting essential services and undermining public confidence.

While Europe’s food security is not currently at risk, the incidents have exposed vulnerabilities in the supply chain. Commission officials have already met with retailers affected by the October attacks in France, signaling heightened concern over the security of critical infrastructure.

Technical and operational challenges

Protecting older refrigeration units from similar attacks will require physical hardware changes and additional investment, according to Sabcobel’s chief executive, Stephan Moelans. Technicians began disconnecting affected units from networks at 1 a.m. following the attacks, highlighting the urgency of the response.

No group has claimed responsibility for the attacks, and no suspects have been identified. The lack of attribution complicates efforts to prevent future incidents.

Connection to earlier incidents

These attacks follow two earlier waves of similar disruptions. In October, cyberattacks targeted Danfoss-made refrigeration systems in France, causing food spoilage and fires. Earlier, Swedish supermarkets ICA and Coop reported cooling system failures suspected to be cyberattacks, though no official confirmation was provided. Lazyfounder previously reported on these incidents, noting the pattern of exploitation of unpatched IoT refrigeration systems.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

This development signals a shift in how the EU approaches critical infrastructure protection, particularly in the retail and food supply sectors. For founders and operators, the attacks underscore the risks of integrating IoT systems into physical operations without robust cybersecurity measures. The EU’s forthcoming review could lead to new regulations or guidelines for retailers, potentially increasing compliance costs but also creating opportunities for cybersecurity startups specializing in supply chain protection. The pattern of attacks also highlights the need for cross-border collaboration, as threats to essential services rarely remain confined to one country.

Related on Lazyfounder

• European Commission
• Ahold Delhaize
• Colruyt
• ICA
• Coop
• Danfoss
• Swedish supermarkets ICA and Coop suspect cyberattack after refrigeration systems fail
• Cyberattacks target supermarket refrigerators in Europe, causing food spoilage
• Cyberattack on French Supermarkets Disrupts Refrigeration Systems, Spoils Perishable Goods
• Critical flaws in Danfoss refrigeration controllers expose thousands to remote attacks
• More policy news