Cyberattacks

Cyberattacks usually mean stolen data or locked screens. This time, the damage is melted ice cream and ruined groceries. A fresh round of suspected hacks has hit refrigeration systems at supermarkets across Europe, and it’s the second such wave in about a month. Quick Facts What the Attackers Did According to Reuters, a Belgian company that runs Delhaize’s systems said the hackers changed the settings to defrost. Dozens of stores saw heavy losses, and supermarkets had to throw out goods that had thawed or were no longer safe to sell. Ahold Delhaize and Colruyt confirmed the attacks overnight. The Likely Weak Spot: Unsupported Refrigeration Controllers Security researchers pointed to internet-connected refrigeration units made by Danish company Danfoss, which they say was no longer providing security updates for them. The earlier French incidents were traced to the same type of equipment. Security firm Claroty had warned in August that these controllers were vulnerable to remote hacking and outages. Who is behind the European attacks hasn’t been established in the reporting I could access. Why This Is More Than a Food Waste Story These attacks show how an internet-connected device with weak security can create real-world damage. Many commercial devices, from refrigeration controllers to building systems, connect to networks for convenience. When manufacturers stop issuing updates, known flaws stay open indefinitely. The food supply chain is an especially sensitive target. In 2025, a cyberattack on U.S. grocery distributor UNFI caused shortages and empty shelves at stores across the country. A Possible U.S. Angle TechCrunch notes that Department of Defense officials are reportedly investigating whether freezer units on military bases were hacked by Iran-backed groups. Iranian hackers were also blamed earlier this year for attacks on U.S. water providers. These are reports of investigations, not confirmed findings. What Retailers and Facility Managers Can Learn General best practices include: What It Means for Shoppers If a store’s cold chain fails, it must discard unsafe food. Shoppers shouldn’t see compromised products on shelves, but empty cases and supply gaps are possible when a retailer is hit. What Readers Are Asking Which countries were hit this time? Belgium, Ireland, Luxembourg and Sweden. Which companies confirmed attacks? Ahold Delhaize and Colruyt. What equipment is blamed? Internet-connected Danfoss refrigeration controllers that researchers say no longer received security updates. Was France affected too? Yes, a similar wave hit hundreds of supermarkets there last month. What to Watch Next Look for attribution of the attackers, vendor guidance or patches, regulatory responses in Europe and any warnings for U.S. retailers using similar equipment. Source: TechCrunch