The latest incident unfolded between Sunday and Monday, when refrigeration and freezer systems at supermarkets across Europe began malfunctioning. Temperatures rose sharply — reportedly as high as 50°C at one store — forcing retailers to throw away food and scramble to protect stock.¹

The disruption was broad but uneven. Ahold Delhaize said dozens of Delhaize outlets in Belgium and Luxembourg were affected; Colruyt reported five Spar stores hit in Belgium. Carrefour and Intermarché each reported problems at 15 Belgian stores, while IKEA’s Mons store, Sweden’s ICA, Finland’s Kesko, Ireland’s Supervalu and Estonia’s Selver also disclosed refrigeration failures.¹

For the retailers, the immediate message was one of recovery. Ahold Delhaize said its stores were again fully operational. Intermarché said security measures had “quickly contain[ed] the attack” in most cases, though some shops lost stock. IKEA kept its Mons outlet open while inspecting equipment and food supplies, describing the impact on its restaurant and Swedish Food Market as limited.¹

But the episode revived alarms raised after hundreds of French supermarkets were targeted in October, when fridges overheated, food spoiled and fires were reported. The European Commission said it was in contact with national authorities and had convened its interinstitutional task force with ENISA and Europol to investigate.¹

No group has claimed responsibility. Rafe Pilling of Sophos said it remained unclear whether the attackers were cybercriminals or pursuing another objective, warning that “empty supermarket fridges are a powerful psychological image.”¹ Fredrik Blix of Visente pointed to a less dramatic but more troubling weakness: refrigerator control units exposed directly to the public internet, including systems that were never patched after a vulnerability was fixed in August.¹

That contrast is the real story. Companies can restore shelves; investigators still must establish whether this was opportunistic sabotage, criminal disruption, or a deliberate attempt to unsettle countries supporting Ukraine.¹