A suspected coordinated cyber-attack has disrupted refrigerator and freezer systems at dozens of supermarkets across at least seven European countries. This has forced stores to discard large quantities of spoiled food and prompted national cybersecurity agencies to issue alerts.

Around 40 Delhaize supermarkets in Belgium and Luxembourg were affected, along with stores in Sweden, Ireland, the Netherlands, Estonia, and Finland. In Sweden, several ICA and Coop shops reported that freezer temperatures had been remotely set as high as 50 degrees Celsius, with one ICA branch in Sjöbo writing on social media that its refrigerators had been "hacked overnight."

Ireland's SuperValu confirmed a "cyber incident" at 13 of its 233 stores, while a Selver supermarket in Estonia and K-stores in Finland also reported malfunctions. Sabcobel, the Belgian manufacturer responsible for Delhaize's refrigeration systems, explained that the evaporators were defrosted and that the attack used the same tactic as the one on French supermarkets the previous month.

Company CEO, Stephan Moelans, stated that the company "had worked through the night and morning to disconnect the affected units from the network" and that the equipment needed hardware changes rather than software updates. The UK's National Cyber Security Centre explained that it was working with international partners and industry to "fully understand details of an incident."

The British Retail Consortium clarified that it was working with local businesses; so far, there have been no incidents reported in the UK. Christophe Hansen, the European Commissioner for Agriculture and Food, said that "it is a deliberate disruption attempt against the EU food system," though he insisted that food security is not currently at risk.

Losses are mounting, with a Delhaize branch in Hoeilaart, Belgium, estimating €100,000 in spoiled produce, while a Swedish store manager reported ruined stock and uncontrolled temperatures. The hacker remains unidentified and investigations are ongoing across multiple jurisdictions to trace the source of the breach.