🔍 Read the full analysis: Can AI Make Sense Of The Second Wave Of Freezer Attacks? on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Supermarkets and other businesses in at least six European countries reported refrigeration systems being switched into defrost or heating modes overnight on Nov. 1-2. The reported method resembles attacks in France in October, but investigators have not identified the perpetrators, and there is no evidence in the available reporting that AI was used.
More than 115 stores and businesses across at least six European countries reported refrigeration problems overnight from Nov. 1 to 2 after internet-connected controllers were apparently switched into defrost or heating modes. The incidents resemble a wave that hit French supermarkets in October, but authorities have not identified who was responsible, and no source has confirmed that AI was involved.
Reports came from Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia, according to BleepingComputer. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores. The totals remain provisional and vary by source: The Record reported more than 50 affected stores in Belgium, while Euronews, citing the newspaper Le Soir, counted about 75 there. Those figures reflect different reporting and store counts, not a single verified consolidated tally.
In Belgium, refrigeration installer Sabcobel’s chief executive, Stephan Moelans, told Belgian media that technicians began disconnecting installations at about 1 a.m. He said around 20 of the several hundred installations his company manages in Belgium were affected, and that Sabcobel itself had not been hacked. The company said internet-reachable store controllers were targeted directly. Ahold Delhaize confirmed an IT incident involving refrigeration systems in several dozen stores; Carrefour Belgium said 15 of its 700 stores were affected. Colruyt said problems affected about five Spar stores run by independent operators, not its own stores.
Retailers and broadcasters also reported disruption in other countries. Sweden’s ICA said at least four affected stores operated outside its central network; Coop reported seven affected stores, with effects ranging from failed cooling to a unit beginning to generate heat. Dutch broadcaster NOS reported that a Danfoss spokesperson put the number of affected Dutch businesses at at least 17, mostly butchers and neighbourhood shops. Ireland’s SuperValu reported 13 outlets, and one Selver store in Estonia was also reported affected. In Belgium, some businesses reported discarded food: Proxy Delhaize in Hoepertingen estimated losses of at least €60,000, according to local reporting cited by VRT NWS.
Risks to Food and Store Operations
The incidents show how an attack on building and refrigeration controls can cause physical disruption without a reported break-in to a store. If a controller changes a freezer’s operating mode, temperatures can rise and food may need to be discarded. That creates costs for operators and potential disruption for customers, although the available reporting does not establish the total financial loss or any broader effect on food supply.
The concentration of reports among some smaller, independently run stores is also relevant. Retailers said that certain affected locations operated outside central networks or used their own refrigeration equipment. That does not establish that independent operation caused the incidents, but it points to a security challenge: equipment managed separately may not receive the same monitoring or safeguards as centrally administered systems.
For readers, the key distinction is between the reported operational impact and what is known about the attack. Multiple businesses reported altered temperatures, and some reported food losses. The identities, motives and methods of the people behind the incidents remain unconfirmed. Belgium’s cyber centre has warned about a general rise in attacks that may involve AI, but that wider warning is not evidence that AI was used here.
Products Worth Considering
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
LG 24G414B-B 24-Inch UltraGear Full HD IPS Gaming Monitor
As an affiliate, we earn on qualifying purchases.
Similar French Incidents in October
The new reports follow incidents in France during the night of Oct. 11 to 12, when refrigeration systems at hundreds of supermarkets were reportedly switched into defrost mode. France’s Paris prosecutor’s office has counted about 700 victims, according to the source material. France’s national cyber agency, CERT-FR, warned on Oct. 12 that remote management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice, and said campaigns were probably still ongoing.
Belgian installer Sabcobel described the mechanism in the latest incidents as “exactly the same” as in France. That is a reported technical similarity, not proof that the same people carried out both waves. Finnish reporting said attacks in Finland and elsewhere targeted specific Danfoss models, but the available accounts do not provide a complete technical analysis or establish whether every affected site used the same equipment or entry method.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Who Accessed the Controllers?
No group has claimed responsibility, and the source material provides no attribution by police or national cyber authorities. Belgium’s federal prosecutor has opened a criminal investigation. The Belgian cyber centre has warned that identifying the attacker may not be possible. It is also not yet clear whether the October incidents in France and the November reports across Europe were carried out by the same actors.
The reported totals are not final and do not align across outlets. Counts differ by country and by the time each report was published; temperatures reported at affected sites also varied, from 15 °C in Hoepertingen to 50 °C in Eeklo and some other locations. The available reports do not establish the full extent of food losses, whether every incident followed the same technical route, or whether any customer data or other systems were affected.
The article’s headline question about AI cannot be answered from the available evidence. Officials’ broader warnings about AI-related cyber activity do not confirm its use in these attacks. There is no reported evidence that an AI system planned, carried out or enabled the freezer disruptions.
Investigations and Damage Counts
Belgian authorities are investigating, while affected retailers and refrigeration specialists are working to restore or isolate equipment and assess losses. Store-level counts and damage estimates may change as operators check systems and report incidents. The source material does not give a timetable for the investigation or identify a next formal update.
Further technical findings would help establish whether the incidents shared a common entry point, which controller models were affected and whether the October and November events were connected. Until authorities or investigators publish evidence, claims about the perpetrators, their motive or the role of AI should remain unconfirmed.
Key Questions
How many businesses were affected?
Reports put the number at more than 115 businesses in at least six countries, with additional temperature anomalies reported in Finland. The count is provisional, and published totals differ by source and timing.
Were the November incidents confirmed as cyberattacks?
Several businesses and industry representatives described the events as cyber incidents or attacks, and Belgian officials opened a criminal investigation. The precise method and scope remain under investigation; a complete technical account has not been published in the source material.
Was AI used in the attacks?
That has not been established. Belgium’s cyber centre has issued broader warnings about attacks that may involve AI, but no source cited here said AI was used in the refrigeration incidents.
Were the October and November incidents carried out by the same people?
That is unknown. Sabcobel said the reported mechanism resembled the October incidents in France, but a similar method alone does not prove a shared perpetrator.
What happens next?
Belgian authorities are investigating, and affected businesses are checking equipment and losses. The next major development would be verified findings about the access route, affected systems and who was responsible.
Source: ThorstenMeyerAI.com
