🔍 Read the full analysis: Could AI Help Defend Supermarket Refrigeration Systems? on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Reports say more than 115 supermarkets and other businesses in at least six European countries experienced refrigeration-system disruptions overnight on Nov. 1–2, 2026. The incidents appear to resemble an October attack in France, but responsibility and any role for AI remain unknown.
Refrigeration systems at more than 115 stores across at least six European countries were reportedly disrupted overnight on Nov. 1–2, after internet-reachable controllers were switched into defrost or heating modes. Retailers and media reports describe damage to frozen and chilled goods; authorities have not identified who was responsible, and no evidence cited so far establishes that AI was used.
The reported incidents affected businesses in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia, with Finnish authorities and retailer Kesko also reporting temperature anomalies at a few smaller stores. The exact tally is unsettled: BleepingComputer reported more than 115 stores across six countries, while other outlets gave different counts, particularly for Belgium. The figures may reflect different reporting periods or definitions of affected sites.
Belgian refrigeration installer Sabcobel said its technicians began disconnecting installations from about 1 a.m. Chief executive Stephan Moelans told Belgian media that internet-reachable store controllers were attacked directly, rather than Sabcobel’s own systems being breached. He said about 20 of the several hundred installations his company manages in Belgium were affected. The installer described the mechanism as matching the October incidents in France.
Retailers gave varying accounts of the impact. Ahold Delhaize said an IT incident affected refrigeration systems in several dozen stores; BleepingComputer put the figure at about 40 in Belgium and Luxembourg. Carrefour Belgium reported 15 affected stores out of 700, while Coop Sweden said seven of its more than 800 stores were affected. A Proxy Delhaize in Hoepertingen reported freezers at 15°C and estimated that at least €60,000 of food had to be discarded, according to a local newspaper cited by VRT NWS. Those figures and losses are company or media reports, not a consolidated official total.
Food Losses Expose Connected-Equipment Risks
The disruption shows how a cyber incident involving building equipment can affect ordinary retail operations, not only checkout systems or customer data. If refrigeration fails or heats instead of cooling, stores may have to close units, discard stock or interrupt sales while equipment is inspected. The reported losses vary by location, and there is not yet a verified total for wasted food or the financial impact.
The pattern reported by retailers points to a possible security gap between centrally managed chains and individual outlets. ICA Sweden said affected stores operated outside its central network; Colruyt said the affected Spar locations were run by independent entrepreneurs with their own refrigeration systems. Finnish reporting likewise described anomalies at smaller stores outside central safeguards. These statements do not prove that network separation alone explains the incidents, but they make older or independently managed systems an important part of the investigation.
The episode also raises questions for businesses that connect refrigeration and other building controls to the internet for remote management. Such access can support maintenance, but exposed interfaces may create risks if not securely configured and maintained. The available reports do not establish how attackers gained access to each controller or whether every incident involved the same weaknesses.
Products Worth Considering
Samsung 27-Inch Odyssey OLED G5 QHD Gaming Monitor
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
LG UltraGear 27GX704A-B 27-inch QHD OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Similar French Wave in October
The reported incidents follow a separate wave in France on the night of Oct. 11–12, when refrigeration systems at hundreds of supermarkets were reportedly switched into defrost mode. The Paris prosecutor’s office counted about 700 victims, according to the source material. France’s cybersecurity agency CERT-FR warned on Oct. 12 that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice, and said attack campaigns were probably still ongoing.
Belgian installer Sabcobel described the method in the November incidents as “exactly the same” as in France. That is an assessment by the installer, not public proof that the same people carried out both waves. Reports also say that some equipment manufacturers had issued updates months earlier. The material does not specify which affected stores installed those updates, whether every compromised model was covered, or whether patching would have prevented each incident.
Reports of unusually high freezer temperatures—including 50°C in Eeklo, Belgium, and accounts from Sweden and Estonia—illustrate the potential operational effect, but temperatures differed by site. Some stores reportedly detected the problem and stopped equipment before more damage occurred; others described substantial food losses.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
— Ahold Delhaize
Who Accessed the Controllers?
No attacker has been publicly identified, and the source material reports no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation. Belgium’s cyber centre has cautioned that investigators may never identify the attacker. It is also unclear whether every reported incident was caused by the same campaign, or whether the reported country and store totals will change as retailers complete checks.
AI’s role is likewise unconfirmed. Belgium’s cyber centre has warned more broadly about rising attacks that partly involve AI, but no source cited in these reports says AI was used to access refrigeration controllers, select targets or carry out the disruptions. The general warning is not evidence about this incident.
Important technical details remain unavailable, including the precise access method for each store, the full list of affected controller models, the state of security updates at each site, and the final scale of spoiled food and financial losses. The reports identify exposed remote-management interfaces as a concern in France, but that does not establish a complete account of how the November incidents unfolded.
Investigators and Retailers Check Systems
Belgium’s criminal investigation is underway, while affected businesses and refrigeration technicians are checking equipment and restoring safe operating conditions. Retailers will need to confirm which sites were affected, whether systems can be securely returned to service, and how much stock was lost. Public updates may also resolve the differences among current store counts.
Authorities and operators may release further findings about exposed controllers, affected models and the security measures needed for remote access. Until those details are published, the October French campaign offers relevant comparison but does not settle responsibility or prove the incidents share an operator. There is no confirmed AI connection, and no public timetable for identifying those behind the attacks.
Key Questions
How many stores were affected?
Reports put the total at more than 115 stores in at least six countries, with Finnish authorities and Kesko also describing problems at a few smaller stores. Counts differ among outlets and may change as businesses verify incidents.
Was artificial intelligence used in the attacks?
That has not been established. Officials have issued broader warnings about attacks involving AI, but the reports provide no evidence that AI was used in this refrigeration incident.
How were refrigeration systems reportedly disrupted?
Installer Sabcobel said internet-reachable controllers were accessed and systems were switched into defrost or heating modes, a method it said resembled the October attacks in France. The precise entry method for every affected site is not publicly confirmed.
Who is responsible?
No suspect or group has been publicly identified, and no one has claimed responsibility in the source material. Belgium’s federal prosecutor has opened an investigation.
What happens to food in affected stores?
Some businesses reported discarding goods after refrigeration temperatures rose. The reported losses vary by location, and there is no consolidated total for spoiled food or financial damage.
Source: ThorstenMeyerAI.com
