Cyberattacks on European grocery stores raise security concerns

Hackers have targeted supermarket refrigeration systems across Europe in two distinct waves, causing significant food spoilage by manipulating temperature controls. The incidents, which occurred in mid-October and early November 2026, forced retailers to discard chilled and frozen products after temperatures were raised to as high as 50°C.

The first major attack affected hundreds of supermarkets in France on Oct. 12. A subsequent wave on Nov. 2 impacted retailers in at least seven to nine countries, including Belgium, Sweden, Estonia, Ireland, Finland, Luxembourg, and the Netherlands. Retailers including ICA, Coop, Ahold Delhaize, Colruyt, Carrefour, Intermarché, SuperValu, and IKEA have reported issues.

Danfoss, a Danish supplier of refrigeration temperature-control systems, confirmed that its technology was targeted during the attacks. Investigations are currently underway by law enforcement agencies to identify the perpetrators and determine how the systems were accessed. Experts are examining the security of internet-connected industrial systems, which often rely on remote management by contractors, default passwords, or outdated software.

Nicole Parker, a former FBI special agent, warned that such attacks on critical infrastructure could potentially target the United States. She noted the essential nature of food supply chains, stating that every human being relies on grocery stores for sustenance.

In the United States, the Army Criminal Investigation Division is investigating refrigeration failures that occurred in late August 2026 at at least six military commissaries in states including Arizona, Wyoming, Rhode Island, Mississippi, and California. Authorities have not confirmed that a cyberattack was the cause of these specific malfunctions, and the investigation remains ongoing alongside the Defense Commissary Agency and the Defense Criminal Investigative Service.