Cyber-attack disrupts Delhaize freezers in Belgium and Luxembourg stores

Dozens of supermarkets across seven European countries have suffered a cyber-attack that has disrupted their refrigeration systems. The incident primarily affected around 40 Delhaize supermarkets in Belgium and Luxembourg, with additional impacts reported in Sweden, Ireland, the Netherlands, Estonia, and Finland.

The timing of this attack follows a similar incident last month that struck hundreds of French supermarkets, prompting heightened concerns about cybersecurity within the retail sector. Sabcobel, a Belgian company responsible for some of the affected refrigeration units, confirmed that the attack switched the units' evaporators to defrost mode, leading to dangerously high temperatures. This has raised alarms as millions of euros worth of food had to be discarded after the previous attack in France.

Stephan Moelans, CEO of Sabcobel, stated that the company has been working diligently to address vulnerabilities in their systems since the October incident. He emphasized the need for physical modifications to the refrigeration units, beyond just software updates, to better protect against future attacks. Most supermarkets utilize internet-connected systems for remote maintenance, which can pose security risks if not properly managed. The temperature in some affected freezers reportedly soared to as high as 50 degrees Celsius (122 degrees Fahrenheit), leading to significant financial losses, including an estimated €100,000 in spoiled produce at a Delhaize store in Hoeilaart.

As investigations continue, national cyber-security agencies in Belgium and Sweden are monitoring the situation. The UK's National Cyber Security Centre is also collaborating with international partners to understand the full scope of the breach, although no incidents have been reported in the UK so far. In response to the attack, Carrefour and Colruyt Group confirmed minor impacts on their operations, while Ikea acknowledged that refrigeration systems at its store in Mons, Belgium, were affected as well. The ongoing threat of cyber-attacks on critical infrastructure underscores the need for enhanced security measures in the retail industry.