The news: Refrigeration systems at supermarket chains across seven European countries—including Belgium, Ireland, Sweden, and the Netherlands—were hit by a suspected cyberattack on November 2 that sent freezer temperatures soaring as high as 50°C (122°F), per The Guardian. Affected retailers included ICA, Coop, Ahold Delhaize, Carrefour Belgium, and SuperValu.

The incident follows an October attack in France that compromised refrigeration systems in roughly 700 stores, causing tens of millions of euros in spoiled inventory.

Zooming in: The latest attack exposed vulnerabilities across supermarket refrigeration networks in multiple countries.

• Sweden's Coop confirmed six stores were hit, while ICA said a limited number of locations were affected.
• Ahold Delhaize reported that dozens of stores in Belgium and Luxembourg lost fresh and frozen inventory.
• Ireland's SuperValu said 13 of its 223 stores were affected and removed chilled and frozen products from shelves.
• Carrefour Belgium reported disruptions in about 15 of its roughly 700 stores, while Colruyt and Intermarché flagged problems in five and 15 stores, respectively.

In the French attack, hackers exploited known vulnerabilities in Danfoss-supplied refrigeration controllers, causing individual stores to lose up to €130,000 ($137,000) in inventory. The company said it identified the flaws last year and had “long recommended” that customers install patches.

Why this matters: The attacks highlight the growing risks retailers face as they connect more physical infrastructure to centrally managed networks. Generative AI is making it easier for attackers to find and exploit software vulnerabilities, which have overtaken stolen credentials as the leading entry point for cyberattacks, per Verizon's 2026 Data Breach Investigations Report.

While these attacks occurred in Europe, US grocers face similar vulnerabilities—and potentially significant competitive consequences. A prolonged outage could leave stores unable to sell fresh products, frustrate shoppers, and push customers toward competitors. Amazon and Walmart would be particularly well-positioned to benefit, given their scale and ecommerce capabilities. The two retailers already account for a combined 49.7% of US retail ecommerce sales, a share projected to reach 50.8% by 2027, per our forecast. For grocers already struggling to compete against those giants online, an operational disruption could make it even harder to retain customers.

Implications for retailers: The refrigeration attacks show how a breach in a single connected system can cause immediate physical losses, from spoiled meat and dairy to empty shelves and lost sales, rather than just compromised customer data. While data breaches can erode customer trust and eat into retailers’ margins, they’re also far less visible than situations that involve significant inventory losses and store closures.

The risks are growing as retailers connect more equipment and systems across their store networks. While automation makes it easier to manage refrigeration, checkout, and inventory, a single security vulnerability could disrupt hundreds of locations, as the French attack demonstrated. The consequences can extend well beyond retail. A cyberattack on Jaguar Land Rover shut down production for weeks and cost more than $2 billion, showing how a cybersecurity breach can quickly become a major business crisis.

Retailers need to balance the productivity gains of automation against the potential costs of a breach—and prepare to contain disruptions before they spread. Yet incident preparedness may not be getting the attention it deserves. Just 3% of cybersecurity decision-makers worldwide identified incident response and preparedness as something they wanted to add to their cybersecurity programs, per a December 2025 Kroll survey.

The European attacks show how relatively simple exploits can cause widespread operational damage. As retailers connect more of their equipment and operations, they need to strengthen their defenses and ensure that a vulnerability in one system doesn't compromise stores across their networks.

This content is part of EMARKETER’s subscription Briefings, where we pair daily updates with data and analysis from forecasts and research reports. Our Briefings prepare you to start your day informed, to provide critical insights in an important meeting, and to understand the context of what’s happening in your industry. Non-clients can click here to get a demo of our full platform and coverage.