Supermarket Freezers Hacked: 50°C Setpoint Ruins Food in Belgium, Sweden
A suspected cyber-attack knocked out refrigeration controls at dozens of supermarkets in Belgium, Luxembourg and Sweden, with one Swedish ICA store reporting its freezers had been set to 50°C. Around 40 Delhaize shops were affected, and one branch estimated €100,000 in lost produce. National cyber-security agencies in Belgium and Sweden say they are monitoring the incident.
What happened at the supermarkets
The attack appears to have targeted refrigeration and freezer controls rather than payment systems or customer data.
Delhaize, one of Belgium's largest supermarket chains, told local media that a "computer incident" hit 40 of its shops overnight. Around the same time, stores in Sweden reported that their cooling systems had been tampered with remotely. An ICA branch in Sjöbo, in southern Sweden, posted that its refrigerators and freezers had been "hacked overnight" and the temperature set to 50°C (122°F).
The damage is measured in food. A Delhaize branch in Hoeilaart, in Flemish Brabant, told Het Laatste Nieuws it had lost €100,000 worth of produce — and the manager said that figure did not include the cost of closing the store. Swedish media showed staff at a Stockholm branch on Odengatan throwing out bags of spoiled food. The Sjöbo store has since reopened.
Not every chain was hit equally. Carrefour said only 15 of its Belgian stores were affected and that it took measures immediately to keep all shops open. Coop in Sweden said seven of its 800 stores were impacted but that the situation was "contained and under control." In Ireland, 13 SuperValu shops were also reported to be affected.
Why retail refrigeration is an easy target
Store cooling systems are increasingly networked, remotely monitored and rarely treated as critical security infrastructure.
Modern supermarket refrigeration is not a standalone thermostat. Chains use remote monitoring platforms to track temperatures across hundreds of sites, flag failures and adjust setpoints without sending an engineer. That convenience is exactly what makes the systems attractive: one compromised account or one exposed controller can reach every store on the network.
The pattern is familiar from other industries. Digital signage, building management systems and industrial controllers have all been hit in recent years because they sit on flat networks with default passwords and firmware that rarely gets patched. A freezer aisle is a low-stakes target in terms of data, but a high-impact one in terms of money and food safety.
The timing also stands out. A similar incident affected hundreds of French supermarkets last month. Whether the two are connected is not yet known, and neither Belgium's CCB nor Sweden's NCSC has attributed the attack. Both agencies say they are monitoring the situation.
The striking detail is not the hack itself — it is that someone could push a freezer setpoint to 50°C across dozens of stores without anyone noticing until the food thawed. Retailers have spent a decade connecting every cooler to the internet for convenience and almost nothing on segmenting those networks. The French incident last month should have been the warning shot. If the same pattern shows up a third time, the conversation will move from IT teams to regulators.
The food-safety question nobody wants to answer
Spoiled stock is the visible loss. The bigger risk is what happens when temperature logs cannot be trusted.
Supermarkets are legally required to keep chilled and frozen food within strict temperature ranges, and most chains rely on the same networked systems to produce those records. If an attacker can change a setpoint, they can also, in principle, alter the log that proves the food was safe. That turns a costly cleanup into a regulatory problem.
For shoppers, the practical advice is unchanged: the affected stores have either reopened after discarding stock or stayed open with unaffected sections. The bigger lesson is for retailers. Freezer controls belong on a segmented network with the same monitoring as any other operational technology, not on the same flat LAN as the back office.
What it means for you
The confirmed impact is limited to Belgium, Luxembourg, Sweden and Ireland, and the affected chains say stores have reopened or remained open. No US, UK or EU-wide outage has been reported, and no customer payment data has been implicated in the incident as described.
If you shop at one of the affected chains, check local store notices before making a trip — a closed freezer aisle is inconvenient, but the food that was discarded is the real loss here. For retailers elsewhere, the incident is a reminder that refrigeration controllers are part of the attack surface, not the facilities team's problem.
The attack is a reminder that the most disruptive hacks are often the least sophisticated. Nobody stole customer data or demanded a ransom in public — someone reached into the cold chain and turned the dial. Until retail refrigeration gets the same security attention as payment terminals, the freezer aisle will stay an easy target.
Frequently asked questions
Which supermarkets were affected by the freezer cyber-attack?
Around 40 Delhaize stores in Belgium and Luxembourg, several ICA and Coop shops in Sweden, and 13 SuperValu stores in Ireland were reported affected. Carrefour said 15 of its Belgian stores were hit.
How much food was lost in the freezer attack?
One Delhaize branch in Hoeilaart estimated €100,000 in spoiled produce, before counting lost sales from closing. Local media report millions of euros in food discarded across the affected stores.
Who is behind the supermarket freezer hack?
It is not clear. No group has claimed responsibility, and neither Belgium's nor Sweden's national cyber-security agency has attributed the incident. Both say they are monitoring the situation.
Sources
- Supermarket freezers in Belgium, Sweden and Luxembourg hit by suspected cyber-attack. news.ycombinator.com, 2026. https://www.bbc.com/news/articles/cq1kd1nee80eo