🔍 Read the full analysis: AI’s Place In The Debate Over Supermarket Refrigeration Security on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Refrigeration systems at more than 115 supermarkets and other businesses across at least six European countries were reportedly disrupted overnight on November 1–2. Companies and officials describe internet-accessible refrigeration controllers being switched into defrost or heating modes, but the attacker’s identity and any role for AI remain unknown.
Refrigeration systems at more than 115 stores in at least six European countries were reportedly disrupted overnight on November 1–2, with some freezers switched into defrost or heating modes. Retailers and refrigeration firms described incidents involving internet-accessible controllers, while authorities opened or continued investigations; no attacker has been identified, and there is no confirmed evidence that AI was used.
Reports from Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia described affected supermarkets and smaller food businesses. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores. The tally is not final: BleepingComputer reported more than 115 affected stores, while other outlets published different counts for Belgium and individual retailers.
In Belgium, Ahold Delhaize said it had identified an IT incident affecting refrigeration systems in several dozen stores. Carrefour Belgium said 15 of its 700 stores were affected, involving a limited number of refrigeration units, mainly freezers. Colruyt said the incidents involved about five Spar stores operated by independent businesses with their own refrigeration systems; Colruyt’s own stores were not affected, according to VRT NWS.
Other reports included at least four ICA stores and seven Coop stores in Sweden, 13 SuperValu stores in Ireland, one Selver store in Estonia, and at least 17 businesses in the Netherlands, according to a Danfoss spokesperson quoted by NOS. In Belgium, some affected businesses reported spoiled stock: a Proxy Delhaize in Hoepertingen estimated food losses of at least €60,000, according to Het Belang van Limburg as cited by VRT NWS. Losses and temperature readings varied by site.
Food Losses and Exposed Store Systems
The incident shows how a cyberattack on building equipment can affect ordinary business operations, not just computers or customer data. If refrigeration fails for long enough, stores may have to discard food, close units or interrupt sales. The reported losses in Belgium illustrate a possible direct cost, though the total financial impact across affected countries has not been established.
The reported pattern also draws attention to smaller businesses and independently operated outlets. Some affected stores were described as operating outside a retailer’s central network or using separate refrigeration equipment. That distinction may help explain why incidents occurred at selected sites rather than across every store in a chain, but it does not by itself establish how attackers gained access.
AI is part of the public debate because Belgium’s cyber centre has warned of a general increase in attacks that can involve AI. That broad warning is not evidence that AI was used here. No authority or company has attributed these incidents to AI, and the reported mechanism—accessing exposed refrigeration controllers—does not establish whether an attacker used automated tools or other AI systems.
Products Worth Considering
Samsung 27 Odyssey OLED G5 (G50SF) QHD Gaming Monitor
Samsung 32-inch Odyssey OLED G8 (G80SH) 4K QD-OLED Gaming Monitor
Dell UltraSharp 32 U3226QER 4K Thunderbolt Hub Monitor
As an affiliate, we earn on qualifying purchases.
A Similar Refrigeration Wave in October
The November incidents followed a reported wave in France on the night of October 11–12, when refrigeration systems at hundreds of supermarkets were affected. The Paris prosecutor’s office has put the number of victims in that episode at about 700. Belgium’s refrigeration installer Sabcobel said the November method was “exactly the same” as in France, describing evaporators switched remotely into defrost mode. That is the installer’s account, not a public technical report establishing the full scope of both attacks.
France’s national cybersecurity agency, CERT-FR, warned on October 12 that remote management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. The agency said attack campaigns were “probably still ongoing.” The warning preceded the November incidents by about three weeks, but available reporting does not establish whether every affected store used the same controller, configuration or access path.
In Belgium, Sabcobel chief executive Stephan Moelans said technicians began disconnecting installations at about 1 a.m. and told media outlets that Sabcobel itself had not been hacked; he said internet-reachable controllers at stores were attacked directly. He reported that about 20 of the several hundred installations his company manages in Belgium were affected. The incidents are now subject to criminal investigation.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Attribution, Scale and AI Remain Unknown
Investigators have not identified who carried out the attacks, and no group has claimed responsibility in the cited reporting. Belgium’s federal prosecutor has opened a criminal investigation. The Belgian cyber centre has warned that the attacker may never be identified, according to the source material.
The total number of affected locations is also unsettled. Published counts differ, and reports cover different retailers, countries and types of business. The precise cause of each temperature change, the full extent of food losses and whether every incident belongs to one coordinated campaign have not been independently established in the information available.
There is no confirmed evidence of AI involvement. The source material notes a general cyber threat warning involving AI, but does not connect AI to this attack. It is also unclear which specific controller vulnerabilities or security gaps were used at each site, or whether all affected businesses had received and applied relevant manufacturer updates.
Investigations and Store Checks Continue
Belgium’s federal prosecutor is investigating the incidents, while retailers, refrigeration firms and national cybersecurity bodies continue to assess affected sites. Store operators will need to check refrigeration equipment, account for any spoiled stock and determine whether systems can safely return to service. Public reporting does not yet provide a common timetable for those checks across countries.
Businesses using remotely managed refrigeration systems may also review whether controllers are reachable from the public internet and whether available manufacturer updates and access protections have been applied. France’s earlier CERT-FR warning highlighted exposed remote-management interfaces, but the reporting does not confirm a single technical fix for every system involved.
Further updates may clarify the final number of affected businesses, the financial and food losses, and whether investigators can link the November incidents to the October attacks in France. Until authorities or companies provide more evidence, the attacker’s identity, the campaign’s full scope and any AI role remain unresolved.
Key Questions
What happened to the supermarket refrigeration systems?
Reports say controllers at stores in several European countries were accessed remotely and refrigeration units were switched into defrost or heating modes. The method has been described as similar to the October incidents in France, but the full technical details have not been publicly established.
How many stores were affected?
BleepingComputer reported more than 115 stores in at least six countries. Finnish authorities and Kesko also reported anomalies at a few smaller stores. Counts vary among reports and may change as companies and authorities review the incidents.
Was AI used in the attacks?
No AI use has been confirmed. Belgium’s cyber centre has discussed a broader rise in attacks that may involve AI, but the cited reporting does not link AI to these refrigeration incidents.
Who was responsible?
No attacker has been identified publicly, and no group has claimed responsibility in the cited material. Belgium’s federal prosecutor has opened a criminal investigation.
Why were some smaller or independent stores affected?
Some retailers said affected outlets operated outside central networks or used their own refrigeration systems. That may help explain why incidents were concentrated at particular sites, but it does not establish the precise access route or security condition at each business.
Source: ThorstenMeyerAI.com
