Cyber Incidents Affect Supermarket Refrigeration Systems Across Several European Countries

Between the night of November 1 and the early hours of November 2, 2026, a new wave of cyber incidents affected commercial refrigeration systems in several European countries. Disruptions were reported at stores in Belgium, Sweden, Luxembourg, Ireland, Estonia and other Member States, following similar incidents observed since October 11. It has not been publicly confirmed that all cases are connected or precisely when each unauthorized access began.

The unauthorized access remotely altered refrigerator and freezer settings, raised temperatures and forced stores to withdraw or discard products. Organizations reporting disruptions included Ahold Delhaize, Carrefour, Colruyt, ICA, Coop and Musgrave, with incidents affecting dozens of stores. The organizations began technical reviews, and some disconnected controllers from the internet, applied updates or replaced equipment while maintaining or restoring store operations.

The latest official status, published on November 4, states that the affected Member States are continuing their investigations and that the European Commission, ENISA, Europol, the CSIRTs Network and EU-CyCLONe are still exchanging information and monitoring the situation. Several retailers reported that their stores were operating again, although some systems remained disconnected from the internet during reviews. There is no official attribution for the November 1-2 wave, and no public confirmation that it is linked to the October incidents.