A coordinated wave of cyberattacks has struck supermarket refrigeration systems across 11 European nations, prompting the European Union to demand a unified regional defense strategy. The incidents, which occurred on Monday, resulted in significant food spoilage and raised alarms about the vulnerability of critical infrastructure to remote digital interference. He added that “no other infrastructure was compromised.”. With dozens of stores across several grocery chains reporting refrigeration failures, belgium was among the hardest-hit countries on Monday.
Reports confirmed that refrigeration units were targeted in Germany, Romania, and the United Kingdom, alongside earlier breaches in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden. While the motive behind the sabotage remains unclear and no group has claimed responsibility, officials from the EU have categorized the events as systemic rather than isolated, stressing the urgent need for collective resilience. The shelves are empty,” he told Italy’s Corriere della Sera newspaper.
In Romania, Dan Cimpean, director of the National Cyber Security Directorate, characterized the attackers as semi-amateurish, noting that no state actor is currently suspected. Similarly, authorities in Italy and the UK downplayed the national threat levels despite the localized damage. In Sicily, several stores reported thousands of euros in losses after being forced to discard inventory, while British officials reported minimal impact from attempts to target smaller meat-processing operations. According to a Romanian official, He did not suspect a state actor. “These are not isolated incidents, and of course, we have to be collectively resilient and prepared for such cyber incidents,” he said. According to giuseppe Spadaro, director of a group that runs Coop supermarkets in Sicily,, Four of its 300 stores were hit, causing thousands of euros in damage.
The technical nature of the attacks mirrors a similar campaign that impacted French supermarkets in October, leading to renewed calls for digital upgrades. In Sweden, the Coop supermarket chain disclosed that several affected refrigerators were running on older 4G-based connections. A company spokesperson, Carlos Cancinos, confirmed that they have since accelerated plans to transition all refrigeration equipment to more secure 5G networks and modern modems to prevent future unauthorized access. Federal prosecutors there have opened an investigation. In Italy, about 20 supermarkets were affected.
Cybersecurity expert Frank Groenewegen of Deloitte highlighted that retailers must immediately audit their internet-connected systems. He advised firms to disconnect vulnerable refrigeration controllers from the public internet if their security status is uncertain, arguing that while this does not address the underlying flaw, it effectively isolates the equipment from external manipulation. “And if they don’t even know, then remove them from the public internet immediately,” he told the Reuters news agency. “With disconnecting, you haven’t fixed the root cause, but you’ve at least isolated those systems so that an attacker is not able to do this any more.”.
The threat extended beyond retail environments, with French authorities confirming that cold storage units within at least three blood banks were also targeted.
The French Blood Establishment reported that temperature and defrost thresholds were intentionally set to dangerous levels, potentially compromising blood products awaiting delivery. “This helps to solve a large share of problems of this kind,” he said.
However, rapid responses from monitoring systems allowed technical teams to intercept the breach before any medical supplies were damaged or patient care was impacted. But he refused to point the finger at any potential culprits.
European agencies are currently collaborating with national authorities to investigate the scope of the attacks and develop a joint defense protocol. While government intelligence offices in affected regions remain on high alert, many officials emphasize that the overall systemic impact remains limited, and efforts are now focused on patching security vulnerabilities across the broader food supply chain. According to italy’s government held talks with the heads of the intelligence services and the National Cybersecurity Agency on Tuesday after the attacks, and Prime Minister Giorgia Meloni’s office, The incident had a “limited” impact. According to “There is no cause for alarm, although all the relevant institutional bodies remain on high alert,” it, In a statement. And that there had been a couple of instances where “vulnerable technology had been exploited”, horne told the BBC the issue affected “the whole food supply chain”.
