🔍 Read the full analysis: Could AI Change The Threat To Europe’s Supermarket Refrigeration? on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Supermarket refrigeration controllers were remotely switched into defrost or heating modes overnight on November 1–2, affecting more than 115 stores across at least six countries, according to reports. The incidents resemble an October attack in France, but investigators have not identified those responsible or confirmed any use of AI.
Refrigeration controllers at more than 115 food businesses across at least six European countries were reportedly switched into defrost or heating modes overnight on November 1–2, disrupting freezers and prompting some stores to discard food. The incidents resemble a cyberattack on French supermarkets in October, but authorities and companies have not identified the perpetrator or said that artificial intelligence was used.
Reports from Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia describe affected stores, with Finnish authorities and retailer Kesko also reporting temperature problems at a few smaller Finnish shops. The totals remain provisional: BleepingComputer counted more than 115 stores across six countries, while other outlets reported different numbers, particularly for Belgium. The available accounts do not establish a single final count.
In Belgium, retailer statements reported incidents at several dozen Ahold Delhaize stores, 15 Carrefour Belgium stores and about five independently operated Spar locations. Carrefour said the affected sites were not hypermarkets and that only some refrigeration units, mainly freezers, were involved. Swedish chains ICA and Coop also reported incidents, including at stores operating outside their central networks. Other reports name independent businesses and outlets in the Netherlands, Ireland and Estonia.
Some affected businesses reported losses. The Proxy Delhaize in Hoepertingen estimated that it had to discard at least €60,000 worth of food, according to local reporting cited by VRT NWS. In Sweden, ICA manager Rickard Nilsson told TV4 that staff could not adjust the temperatures and that heat was blowing into freezers. Belgian installer Sabcobel said technicians were disconnecting installations overnight; its chief executive said about 20 of the several hundred installations it manages in Belgium were affected.
Could AI Change the Threat to Europe’s Supermarket Refrigeration?
Reported remote changes to refrigeration controllers disrupted food businesses across Europe. The incidents are under investigation; neither a shared perpetrator nor AI involvement has been confirmed.
Remote controller changes are reported. An AI-enabled attack is not.
One disruption, unevenly reported
Accounts describe affected shops in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and retailer Kesko also reported temperature problems at a few smaller shops.
Dozens of stores
Ahold Delhaize reported several dozen affected stores; Carrefour Belgium said 15 of its 700 stores were affected. About five independent Spar locations were also reported.
Still provisional
Media and company figures differ, particularly for Belgium. More than 115 is a reported tally, not a reconciled official count.
Problems also noted
Finnish authorities and Kesko reported temperature issues at a few smaller shops, adding to an evolving picture of the incidents.
When cold storage stops being cold
Building equipment can create direct business costs when disrupted—even when payment systems and customer databases remain untouched.
The Proxy Delhaize in Hoepertingen estimated it had to discard at least this much food, according to local reporting cited by VRT NWS.
Stores must assess which products stayed within safe temperature limits and what must be discarded. No Europe-wide loss total is available.
ICA manager Rickard Nilsson told TV4 that staff could not adjust temperatures and that heat was blowing into freezers.
Installer Sabcobel said technicians disconnected installations overnight. Its chief executive said about 20 of several hundred installations it manages in Belgium were affected.
A reported pattern, not yet a proven link
The November reports followed a French incident in October. Similar descriptions are notable, but public accounts do not establish that every event came from one campaign.
French supermarkets reportedly experienced refrigeration controllers switched into defrost mode.
CERT-FR warned that remote management interfaces were exposed online and said campaigns were probably ongoing.
New reports described controllers changed to defrost or heating modes at businesses in multiple countries.
Belgium’s federal prosecutor opened a criminal investigation. Attribution and technical links remain unconfirmed.
Attributed assessment: Sabcobel described the method as the same as in France, with evaporators remotely switched into defrost mode. This is an installer’s assessment, not a public technical report independently confirming every intrusion detail.
What can—and cannot—be concluded
Separate reported facts from open questions as investigators and retailers assess the damage.
| Question | Reported or established | Still unresolved |
|---|---|---|
| What happened? | Some refrigeration controllers were reportedly switched remotely into defrost or heating modes. | The complete technical account and precise entry route. |
| How many were hit? | More than 115 stores in at least six countries were counted by one outlet. | A verified, reconciled total across all affected businesses. |
| Who was responsible? | Belgium’s federal prosecutor is investigating. | No suspect or group has been publicly identified; no claim of responsibility is reported. |
| Was AI involved? | Belgium’s cyber centre has issued broader warnings about AI and cyberattacks. | No campaign-specific evidence reported |
Site-specific readings
VRT NWS reported 50°C in freezers at a Delhaize in Eeklo and 15°C at Hoepertingen; other coverage cited 17°C at Belgian units. These are reports from different locations, not a regional measurement.
Scope varied by site
Carrefour said affected sites were not hypermarkets and only some refrigeration units, mainly freezers, were involved. ICA said affected stores were outside its central network.
Not one proven weakness
Independent outlets appear in reports, which may point to gaps in centralized security coverage. It does not prove that all affected businesses shared the same weakness.
Evidence should lead the next update
Useful next disclosures would clarify the scale, the access path and whether the October and November incidents are technically connected.
Verified incident count
Retailers and authorities can reconcile affected sites, units and countries as assessments progress.
Controller access
Technical findings could explain how equipment was reached and what safeguards operators should review.
Food and financial impact
Stores need to assess stock safety and losses. Current accounts do not provide a Europe-wide total.
Attribution and AI
Claims about a shared actor, a common source or AI assistance require evidence that has not been made public.
Risks to Food and Store Operations
Refrigeration failures can affect food safety, stock and a store’s ability to trade. The reported incidents show that a disruption to building equipment can have direct costs even when the affected system is not a payment network or customer database. Businesses also face uncertainty about which products remained safe and how much stock must be discarded; individual reports give estimates, but no Europe-wide loss total is available.
The concentration of reports among smaller outlets or independently run stores points to a possible gap in centralized security coverage, though it does not prove that every affected business had the same weakness. ICA said affected stores were outside its central network, and Colruyt said its own stores were not affected while some independently operated Spar locations were. For retailers and other organizations, internet-connected equipment used to manage buildings can create operational risks if it is accessible remotely without adequate safeguards.
The possible AI angle should be kept separate from the confirmed incident. Belgium’s cyber centre has warned more broadly that some cyberattacks involve AI, but the source material offers no evidence that AI helped carry out this campaign. That distinction matters: the immediate reported issue is remote access to refrigeration controllers, not a documented AI-driven attack.
Products Worth Considering
LG UltraGear 27GX704A-B 27-inch QHD OLED Gaming Monitor
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung 27 Odyssey OLED G5 (G50SF) QHD Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Similar French Incident in October
The November incidents followed a reported attack on French supermarkets during the night of October 11–12. French authorities and companies described refrigeration controllers being placed into defrost mode. The Paris prosecutor’s office counted about 700 victims, according to the source material, while France’s national cyber-security agency CERT-FR warned on October 12 that remote management interfaces for refrigeration controllers were exposed online and said campaigns were probably still ongoing.
Belgian installer Sabcobel characterized the method in the new incidents as the same as in France: evaporators were remotely switched into defrost mode. That is an attributed assessment, not a public technical report that independently establishes every detail of the intrusions. Belgium’s federal prosecutor has opened a criminal investigation. Sabcobel’s chief executive said the installer itself was not hacked and that internet-reachable controllers at customer sites were attacked directly.
Reported temperatures varied by location. VRT NWS reported freezers at 50°C at a Delhaize in Eeklo and 15°C at the Hoepertingen store; other coverage cited a 17°C reading at Belgian units. Those figures are reports from different sites, not one region-wide measurement. Likewise, the store counts differ across media and company accounts, so they should be treated as estimates rather than a reconciled official total.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
— Ahold Delhaize
Attribution and AI Remain Unconfirmed
No suspect or group has been publicly identified, and there has been no claim of responsibility in the source material. Belgium’s federal prosecutor is investigating, while the country’s cyber centre has warned that the attacker may never be identified. The precise entry route, the number of compromised controllers and whether all incidents across countries came from one actor or campaign have not been established publicly.
There is no confirmed evidence of AI involvement. A general warning that AI is increasingly used in cyberattacks is not proof that AI played a role in these incidents. The source material also does not provide a complete technical account of how the controllers were accessed, nor a final, independently reconciled tally of affected businesses or financial losses.
Investigators and Retailers Assess Damage
Belgium’s federal prosecutor is investigating, and affected retailers and refrigeration providers are assessing which sites and units were disrupted. The next useful updates would include a verified incident count, a clearer account of how the controllers were reached and whether the French and later European incidents are technically linked.
Stores will also need to determine what food can be retained and what must be discarded, while operators review remote access to refrigeration equipment. Until investigators or companies publish more technical evidence, claims about the attacker’s identity, a common source for every incident, or an AI-enabled method remain unconfirmed.
Key Questions
What happened to the supermarket refrigeration systems?
Reports say some controllers were remotely switched into defrost or heating modes, raising temperatures in freezers and other refrigeration units at affected businesses.
How many stores were affected?
BleepingComputer reported more than 115 stores in at least six countries. Other reports give differing totals, and Finnish authorities and Kesko also reported problems, so there is not yet a reconciled final count.
Was AI used in the attacks?
That has not been confirmed. Belgium’s cyber centre has warned generally about attacks involving AI, but no source in the material says AI was used in this campaign.
Who was responsible?
No perpetrator has been publicly identified, and no group has claimed responsibility in the source material. Belgian authorities have opened a criminal investigation.
Were all affected stores part of major chains?
No. Reports include chain stores as well as independent businesses. Some affected locations were described as operating outside their retailers’ central networks or using their own refrigeration equipment.
Source: ThorstenMeyerAI.com
