In brief
In early November, a cyber‑attack targeted refrigeration equipment at 13 SuperValu stores in Ireland and similarly affected supermarkets in Sweden, Belgium, Luxembourg, and France. Retailers responded by pulling perishable goods from shelves, while authorities have yet to determine whether these events are linked or identify the perpetrators. The incidents expose weaknesses in food‑retail cybersecurity and threaten public trust in food safety.
A cyber incident disrupted refrigeration systems at 13 supermarkets owned by the Irish chain SuperValu on Monday, prompting those stores to remove chilled and frozen products from sale as a precautionary measure. Similar failures were reported worldwide, with supermarket chains in Sweden, Belgium, Luxembourg and France experiencing temperature rises that jeopardized shelf‑stable food and in some cases caused fires, according to a report from Xinhua on November 2.
Musgrave Group, which owns SuperValu, said the problem was confined to a specific model of refrigeration equipment. It immediately removed all temperature‑controlled goods and evoked its emergency protocols. “Our monitoring systems alerted us to the issue and we took immediate action,” a company spokesperson said.
Our monitoring systems alerted us to the issue and we took immediate action,the spokesperson added. The chain reported that non‑perishable items were still available and that it was collaborating with equipment suppliers and cybersecurity specialists to diagnose the cause and restore service.
In Sweden, grocery retailer Axfood disclosed that a delivery‑centre freezer used for home‑delivery orders had been subject to a hacking attempt that altered its temperature controls. The incident was flagged by the centre’s automated systems, which halted the delivery network until the safety of its stock could be confirmed. The Swedish Food Agency has announced a review of its refrigerated supply network to assess vulnerability.
Other Swedish chains – ICA and Coop – also confirmed overnight refrigeration problems. Coop said six of its stores experienced cooling failures, leading the company to pull fresh and frozen items from the shelves for safety checks. ICA confirmed that only a limited number of locations were affected, with one store reporting that its refrigeration and freezer temperatures had been set to 50 °C after the suspected cyber‑attack.
Across Belgium and Luxembourg, Ahold Delhaize, the parent company of Delhaize supermarket, said an IT incident had disrupted the refrigeration systems at dozens of its stores. The breach forced 1 000 perishable products to be removed from the shelves across the affected locations. Colruyt Group, another major Belgian retailer, disclosed that five Spar stores suffered similar cooling failures after their refrigeration units were accessed by unknown parties.
These attacks follow a major cyber‑incident in France in October, when hackers reportedly gained control of the refrigeration systems at hundreds of supermarkets. Police said the unauthorized temperature manipulation caused several shelves to reach dangerous temperatures, resulting in food spoilage and, in a few cases, fires that sparked wide‑area evacuations. The French Food Authority criticised the lack of robust cyber‑security measures in the retail food sector.
While the Xinhua report did not find a definitive link between the November incidents and the past French attack, authorities have not yet established whether a single group or separate actors were responsible. The European Union’s cybersecurity task force has urged retailers to strengthen their data‑protection and monitoring protocols to prevent future disruptions. The incidents have also sparked debate in Parliament about the need for mandatory cybersecurity standards in the food‑distribution industry.
Impact on Food Safety and Public Trust
The disruptions underscore the fragility of Europe's food‑retail infrastructure, a sector that serves millions of households daily. When refrigeration systems fail, perishable goods can spoil within hours, leading to immediate financial losses for retailers and potential health risks for consumers who may unknowingly purchase compromised products. The withdrawals of frozen and chilled items also disrupt the supply chain, forcing regional dealers to re‑source stock, delay deliveries, and increase transport costs.
Beyond the economic cost, the outbreaks raise public confidence in the safety and reliability of grocery supplies. Across the affected countries, citizens have voiced concerns on social media, demanding clearer communication from supermarkets about the steps being taken to secure their premises and explain why their stored food is safe. Several consumer groups have called for stricter regulations on the use of industrial refrigeration equipment in retail settings.
While the retail chains have cooperated with cyber‑security specialists and equipment vendors, the incidents highlight a deeper systemic issue: many Fortune‑500 food retailers use legacy refrigeration technology that may lack comprehensive digital safeguards. Parliamentarian debates in France and Italy have therefore pushed for legislation that would impose minimum cybersecurity standards on firms that operate temperature‑controlled storage units.
For everyday citizens, the food‐chain breaches mean interrupted access to fresh produce and the potential for higher prices as suppliers adjust their inventories to meet unpredictable spoilage. A monitoring council established by the European Commission will look into whether these security gaps pose a broader risk to public health, especially in regions where refrigeration outages have previously led to foodborne illness outbreaks.
Municipal health authorities have pledged to increase inspection schedules at supermarkets and to provide translation‑friendly advisories for consumers with limited language skills, acknowledging that food safety is a social determinant of health. In the coming months, the European Food Safety Authority will coordinate a cross‑border contingency plan, offering technical support to retailers that lack cyber‑security expertise, with the goal of preventing the next wave of disruptions and preserving trust in the continental food supply chain.
