🔍 Read the full analysis: Europe’s Freezer Attacks Prompt New Questions About AI on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Refrigeration systems at more than 115 stores across at least six European countries were reportedly switched into defrost or heating modes overnight on November 1–2, damaging food and disrupting businesses. The reported method resembles an October attack in France, but investigators have not attributed the incidents, and there is no evidence that AI was used.
Refrigeration systems at more than 115 European stores were reportedly disrupted overnight on November 1–2, with some controllers switched into defrost or heating modes and food spoiled. The incidents, reported across at least six countries, resemble an October attack in France, but no one has been identified and officials have not said that artificial intelligence was used.
Reports compiled by BleepingComputer count affected businesses in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia; Finnish authorities and retailer Kesko also reported temperature problems at a few smaller stores. The precise total remains unsettled because news reports and companies give different counts. In Belgium, estimates range from more than 50 stores in The Record’s reporting to roughly 75 in a count cited by Euronews from Belgian newspaper Le Soir.
Retailers and operators described disrupted refrigeration at individual sites. Ahold Delhaize said it had identified an “IT incident affecting the refrigeration systems in several dozen stores.” Carrefour Belgium said 15 of its 700 stores were affected, while Coop in Sweden reported incidents at seven of more than 800 stores. ICA said at least four of its stores were affected. Several companies said the incidents involved locations operating outside their central networks or using independently managed equipment.
The effects varied. VRT NWS reported that a Delhaize store in Eeklo had freezers set to 50°C, while a Proxy Delhaize in Hoepertingen reported a temperature of 15°C and estimated that at least €60,000 worth of food had to be discarded. Those figures are reports about specific stores, not an estimate of total losses across Europe. Belgian installer Sabcobel said technicians began disconnecting affected installations during the night.
Europe · Retail systems · Incident brief
Europe’s Freezer Attacks Prompt New Questions About AI
Refrigeration controls at more than 115 stores were reportedly switched into defrost or heating modes overnight on November 1–2, disrupting businesses and spoiling food. Investigators have not attributed the incidents, and there is no evidence that AI was used.
A cold-chain problem with a physical impact
Retailers in several countries reported refrigeration problems. Controllers were described as being switched remotely into defrost or heating modes. Individual store reports show the range of disruption; they do not establish Europe-wide conditions or total losses.
VRT NWS reported that freezers at a Delhaize store in Eeklo had been set to 50°C.
A Proxy Delhaize in Hoepertingen estimated at least €60,000 worth of food had to be discarded.
Installer Sabcobel said technicians began disconnecting affected installations during the night.
Store counts vary across reports
The reported totals differ by source and operator. These figures describe specific company or media accounts, not a verified final tally.
The Record reported more than 50 affected stores. Euronews cited a Le Soir count of roughly 75.
Carrefour Belgium said 15 of its 700 stores were affected, in Flanders and Wallonia.
Coop reported incidents at seven of more than 800 stores. ICA said at least four stores were affected.
Bars are scaled for visual comparison only; they show reported affected-store counts, not rates. Company totals differ substantially.
How the reported disruption reached store operations
Refrigeration controls are operational technology: they manage physical equipment, so changes to settings can affect food stocks and daily operations.
Controller access
Remote-management interfaces may be reachable online; the access route in each incident is not confirmed.
Mode changed
Some controllers were reportedly switched into defrost or heating modes.
Cold storage disrupted
Temperatures rose at some locations, with food spoilage and operational disruption reported.
Sites responded
Operators investigated equipment; Sabcobel said technicians disconnected affected installations.
A similar incident was reported in France
France saw a supermarket refrigeration incident on the night of October 11–12, 2026. Reporting describes similarities in the method, while the available information does not prove that the November events involved the same actor or access route.
“Exactly the same” mechanism, with evaporators switched remotely into defrost mode.
Sabcobel’s description of the later incidentsRemote interfaces drew attention
CERT-FR warned that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. It said campaigns were “probably still ongoing.” The warning is relevant context, not confirmation of the November access route.
What remains unknown
Responsibility has not been established. Source reporting identifies no suspect, attribution, or claim of responsibility.
No identified actor
It is unclear whether incidents across countries were coordinated or whether the same person or group was involved.
Counts are incomplete
Store totals and financial losses vary or remain unavailable. Individual temperature reports are not a Europe-wide picture.
Not established
No cited authority, retailer, or installer said AI was used. A general warning about AI and cybercrime is not evidence for this incident.
What investigators and businesses may clarify next
Belgium’s federal prosecutor is investigating. Retailers and refrigeration operators are identifying affected equipment and restoring normal operations. Further findings could establish a firmer site count and whether incidents share a technical cause.
Build a clearer picture
Confirm affected sites, compare technical evidence across countries, and publish findings as investigations progress.
Review controller exposure
Check whether refrigeration controls are reachable from the internet and whether independently managed locations follow consistent security practices.
Key questions
What happened?
Reports say controllers at stores in several European countries were remotely switched into defrost or heating modes overnight on November 1–2, 2026. Some stores reported spoiled food or disrupted refrigeration.
How many stores were affected?
BleepingComputer counted more than 115 stores in at least six countries, with additional problems reported in Finland. Counts differ and the final total is unconfirmed.
Was AI used?
That has not been established. The reporting cited here does not say AI was used in the incidents.
Who carried it out?
No suspect or group has been identified in the source reporting, and no one has claimed responsibility.
Risks to Stores Beyond IT Networks
The incidents show how an online-accessible building system can affect food stocks and day-to-day operations, even when a business’s main corporate network is not reported to be compromised. Refrigeration controls are operational technology: they manage physical equipment, and changing their settings can have direct consequences for products that need to remain cold.
Reports point to smaller, independently run stores as particularly exposed in this wave. Colruyt said the affected Spar locations were independently operated and had their own refrigeration systems; ICA likewise said its affected stores operated outside the central network. These accounts do not establish a single cause for every incident, but they highlight a practical security challenge: equipment managed separately from a chain’s central safeguards may be harder to monitor consistently.
The reported scale also matters because the episodes cross national borders and follow a similar incident in France. Authorities and businesses may need to coordinate investigations and review how refrigeration controllers are exposed and managed. The available reporting does not establish the total financial cost, the full number of affected businesses, or whether all incidents were carried out by the same person or group.
Products Worth Considering
Samsung 32-inch Odyssey OLED G8 (G80SH) 4K QD-OLED Gaming Monitor
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
Samsung 49-Inch Odyssey G93SC QD-OLED Curved Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Similar French Incident in October
The overnight disruption followed attacks on supermarket refrigeration systems in France during the night of October 11–12, 2026. The Paris prosecutor’s office counted about 700 victims in that case, according to the source reporting. Belgian installer Sabcobel said the later incidents used the “exactly the same” mechanism as the French wave, describing evaporators switched remotely into defrost mode.
France’s national cybersecurity agency, CERT-FR, warned on October 12 that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. It said attack campaigns were “probably still ongoing.” That warning offers relevant background, but it does not by itself confirm that every incident reported on November 2 used the same access route or involved the same actor.
Belgium’s federal prosecutor has opened a criminal investigation. The Belgian Centre for Cybersecurity has warned more generally about a rise in attacks partly involving AI, but the reporting provided for this story does not link AI to these refrigeration incidents. A general warning about AI and cybercrime is not evidence that AI was used in a particular attack.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Who Accessed the Controllers?
Responsibility has not been established. The source reporting identifies no suspect, attribution, or claim of responsibility. Belgium’s cyber centre has said the attacker may never be identified. It is also not clear whether the incidents in each country were coordinated, whether every affected site was accessed in the same way, or how many businesses ultimately experienced problems.
The precise loss figures and store totals remain incomplete or inconsistent across reports. Temperatures cited in coverage range from 15°C at one Belgian store to 50°C in reports about other locations. These are individual observations, not a complete picture of conditions across all affected sites.
AI involvement is unconfirmed. No cited authority, retailer, or installer said AI was used in the attacks. The available information also does not fully specify which vulnerabilities or access credentials, if any, were involved at each location. The reported overlap with the French incidents is a similarity in method, not proof of a shared perpetrator.
Investigations and Store-System Reviews
Belgium’s federal prosecutor is investigating, while affected retailers and refrigeration operators are working to identify impacted equipment and restore normal operation. The next useful updates would establish a more reliable count of affected sites, clarify whether incidents in different countries share a technical cause, and provide findings from the criminal investigations.
Businesses that rely on refrigeration systems may also review whether controllers are reachable from the internet and whether independently managed stores follow the same security practices as centrally managed locations. France’s CERT-FR has already warned about exposed remote-management interfaces. It remains unknown whether further incidents will be reported or whether authorities will identify those responsible.
Key Questions
What happened to the supermarket freezers?
Reports say refrigeration controllers at stores in several European countries were remotely switched into defrost or heating modes overnight on November 1–2, 2026. Some stores reported spoiled food or disrupted refrigeration.
How many stores were affected?
BleepingComputer counted more than 115 stores in at least six countries, with additional problems reported in Finland. Counts differ across reports, and the final total has not been confirmed.
Was AI used in the attacks?
That has not been established. The reporting cited here does not say AI was used. A broader warning from Belgium’s cyber centre about attacks partly involving AI is not evidence that AI played a role in these incidents.
Who carried out the attacks?
No suspect or group has been identified in the source reporting, and no one has claimed responsibility. Belgium’s federal prosecutor has opened a criminal investigation.
Could this be connected to the October attack in France?
Sabcobel said the reported mechanism was the same as in the French incidents on October 11–12. That similarity does not confirm that the same people were responsible or that every later incident had an identical cause.
Source: ThorstenMeyerAI.com
