🔍 Read the full analysis: How AI Fits Into The Story Of Attacks On Supermarket Freezers on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Reports say more than 115 supermarkets and other businesses in at least six countries experienced problems with refrigeration systems overnight on November 1–2. The incident resembles an October attack in France, but investigators have not publicly identified who was responsible, and there is no evidence in the source material that AI was used.
Refrigeration systems at more than 115 stores in at least six countries were reportedly disrupted overnight on November 1–2, with some controllers switched into defrost or heating modes, according to reports collected by BleepingComputer and other outlets. The incidents echo a wave of attacks on French supermarkets in October, but no attacker has been identified, and there is no confirmed evidence that AI was involved.
In Belgium, store managers at Ahold Delhaize received text messages about refrigeration problems at about 4 a.m., according to Belgian broadcaster RTL, as cited by BleepingComputer. VRT NWS reported that freezers at a Delhaize in Eeklo were set to 50°C. Refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that technicians began disconnecting installations from about 1 a.m. He said roughly 20 of the several hundred installations his company manages in Belgium were affected, and that the incident involved controllers reached directly over the internet rather than a hack of Sabcobel itself.
Retailers and local reports described disruption across several chains. Ahold Delhaize said an IT incident affected refrigeration systems in several dozen stores; BleepingComputer estimated about 40 locations in Belgium and Luxembourg. Carrefour Belgium said 15 of its 700 stores were affected, mainly through a few refrigeration units. Colruyt said about five Spar stores run by independent operators were affected, while its own stores were not. In Sweden, ICA reported at least four affected stores outside its central network; Coop said seven of its more than 800 stores had refrigeration problems. Reports also listed 13 SuperValu stores in Ireland, one Selver store in Estonia, around 15 Intermarché outlets and an IKEA store in Belgium, and at least 17 businesses in the Netherlands, mostly butchers and neighbourhood shops.
There are also reports of food losses. The Proxy Delhaize in Hoepertingen reported freezers at 15°C and estimated that at least €60,000 of food had to be discarded, according to Het Belang van Limburg as cited by VRT NWS. A butcher in Hove reportedly discarded hundreds of kilograms. In Antwerp, De Laet & Van Haver noticed the tampering around 3 a.m. and stopped its systems in time, VRT reported. The reported count varies by outlet and country; the figures should not be treated as a single independently verified total.
Cyber incident · Europe · November 1–2, 2026
How AI Fits Into The Story Of Attacks On Supermarket Freezers
Reports describe refrigeration controllers switched into defrost or heating modes at businesses across Europe. The pattern echoes an October attack in France, but investigators have not named a culprit—and the available reporting does not confirm AI was used.
A reported wave of temperature tampering
Accounts from retailers and local media describe refrigeration systems disrupted at chain stores and independent businesses. Counts vary across reports and should not be read as one independently verified total.
Controllers changed modes
Some systems were reportedly switched remotely into defrost or heating settings, disrupting temperature control at stores.
Losses differed by site
Some businesses reported discarded food; others caught the change in time, shut down equipment, or had limited disruption.
Who accessed the systems?
No attacker has been publicly identified. It is not clear whether every site was reached through the same route or equipment.
Keep the claim inside the evidence
The supplied reporting contains no confirmation that AI played a role in this incident.
“No source in the supplied reporting confirms AI use.”
What the record supportsBelgium’s cyber centre has warned generally about rising attacks that partly involve AI.
That warning does not show AI was used to discover exposed controllers, alter settings, or select stores.
AI involvement remains unconfirmed; naming it as the cause would go beyond the available evidence.
From internet access to store disruption
The reported pattern points to a practical exposure: connected building equipment can affect daily operations even when a retailer’s main corporate network is not reported as breached.
Some refrigeration controls may be accessible through internet facing interfaces.
Reports describe units switched into defrost or heating modes.
Freezers warm, alarms prompt action, and store operations are disrupted.
Businesses assess stock, restore safe temperatures, and may discard food.
A pattern across several countries
Examples below reflect outlet and retailer reports; the counts may overlap or represent different reporting times.
Belgium
Several chains affected: Ahold Delhaize reported several dozen stores; Carrefour Belgium said 15 of 700 stores; Colruyt said about five independently run Spar stores. A Proxy Delhaize in Hoepertingen estimated at least €60,000 in discarded food.
Sweden & Ireland
Retailer reports: ICA reported at least four stores outside its central network; Coop said seven stores had refrigeration problems. Reports listed 13 SuperValu stores in Ireland.
Elsewhere
Reported cases: One Selver store in Estonia, around 15 Intermarché outlets and an IKEA store in Belgium, and at least 17 businesses in the Netherlands. Finnish authorities and Kesko also reported anomalies at a few smaller stores.
Local examples include a butcher in Hove that reportedly discarded hundreds of kilograms of food, and a business in Antwerp that stopped its systems after noticing tampering around 3 a.m.
France offers a comparison, not an attribution
The November reports appeared less than three weeks after a similar incident in France on October 11–12.
Exposed remote interfaces
France’s CERT-FR warned that remote management interfaces for refrigeration controllers were exposed online contrary to good practice, and said campaigns were probably ongoing. The Paris prosecutor’s office counted about 700 victims, according to the supplied reporting.
Similar reported mechanism
Belgian installer Sabcobel described the reported mechanism as the same as in France. Finnish reporting also referenced targeted Danfoss controller models. Similarity suggests a recurring pattern, but does not prove a shared perpetrator or identical access route.
Investigation before conclusions
Belgium’s federal prosecutor has opened a criminal investigation. A clearer account from investigators or cyber authorities is the next useful milestone.
How many sites were affected?
BleepingComputer reported more than 115 stores across at least six countries. Other outlets published different totals, and counts may overlap or reflect different reporting times.
Was AI involved?
No confirmed evidence in the supplied reporting says AI was used. A general warning about AI assisted attacks does not establish a role in this incident.
Was the same access route used everywhere?
That is not clear. Reports mention internet reachable controllers, but do not establish that all affected sites were accessed in the same way or used the same models.
What should businesses establish?
Which locations and independent operators were affected, how safe temperature control was restored, and whether food needs to be discarded.
Small Stores Face Greater Exposure
The reported pattern points to a practical risk for businesses that connect refrigeration and other building systems to the internet. Food safety, stock losses and store operations can be affected even without a break-in or disruption to a retailer’s main corporate network. The incidents described here often involved independent stores or equipment outside a chain’s central safeguards, according to retailer statements and news reports.
The immediate impact is uneven: some shops reportedly lost food, while others shut down equipment or caught the problem in time. But any disruption to temperature control can force businesses to discard stock or temporarily change operations. That makes the security of internet-accessible controllers relevant not only to supermarket chains, but also to smaller retailers, contractors and equipment owners.
AI is not a confirmed part of this incident. Belgium’s cyber centre has warned generally of rising attacks that partly involve AI, according to the source material. That warning does not establish that AI was used to find exposed controllers, carry out the reported changes or select the affected stores. Treating AI as the cause would go beyond the available evidence.
Products Worth Considering
Samsung 49-Inch Odyssey G93SC QD-OLED Curved Gaming Monitor
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Samsung 32-inch Odyssey OLED G8 (G80SH) 4K QD-OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
From France to Northern Europe
The November incidents were reported less than three weeks after a similar attack in France on the night of October 11–12. France’s CERT-FR warned on October 12 that remote management interfaces for refrigeration controllers were exposed online in ways that went against good practice, and said campaigns were probably still ongoing. The Paris prosecutor’s office has counted about 700 victims in the French wave, according to the source material.
Belgian installer Sabcobel described the mechanism reported in the new incidents as “exactly the same” as in France: refrigeration units were switched into defrost mode remotely. Finnish authorities and retailer Kesko also reported overnight temperature anomalies affecting a few smaller stores, while Finland’s National Cyber Security Centre said attacks in Finland and elsewhere targeted specific Danfoss models, according to Finnish news agency STT. Those reports indicate a shared pattern, but do not by themselves establish who carried out the incidents or whether every affected system was reached in the same way.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
— Ahold Delhaize
Attribution and AI Use Remain Unknown
Who carried out the attacks remains unknown. The source material reports no public attribution and no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation, while Belgium’s cyber centre has warned that identifying the attacker may not be possible.
The overall scale is also not settled. BleepingComputer reported more than 115 stores across six countries, while other reports gave differing totals for Belgium and listed additional Finnish cases. Country and retailer counts may overlap or reflect different reporting times. Temperatures and losses also vary by location, and the accounts do not provide a complete, independently verified tally.
It is not clear whether all affected sites were reached through exposed internet-facing interfaces, whether the same controller models were involved everywhere, or whether any system updates could have prevented the incidents. No source in the supplied reporting confirms AI use; a general warning about AI-assisted attacks is not evidence that AI played a role here.
Investigators Trace the Controllers
Belgium’s federal prosecutor is investigating, and authorities and affected businesses may provide further details about the access route, the equipment involved and the losses. Retailers will also need to establish which stores and independent operators were affected, restore safe temperature control and assess whether food must be discarded.
For now, the next useful milestone is a clearer account from investigators or cyber authorities that connects the reported incidents across countries without overstating what has been verified. Until then, the reported similarity to the French wave is evidence of a recurring pattern—not proof of a shared perpetrator, and not proof of AI involvement.
Key Questions
What happened to the supermarket freezers?
Reports say refrigeration controllers at stores in several European countries were remotely switched into defrost or heating modes overnight on November 1–2, 2026. Some businesses reported damaged stock or disrupted refrigeration.
How many stores were affected?
BleepingComputer reported more than 115 stores in at least six countries. Other outlets published different country and retailer counts, and Finnish authorities and Kesko also reported problems. The total has not been established as a single independently verified figure.
Has anyone confirmed that AI was used?
No. The supplied reporting contains no confirmation that AI was used in these attacks. Belgium’s cyber centre has discussed AI as part of a broader rise in cyberattacks, but that general warning does not establish AI involvement in this incident.
Who is responsible?
No perpetrator has been publicly identified, and the reporting describes no claim of responsibility. Belgium’s federal prosecutor has opened an investigation; attribution remains unresolved.
Why were some smaller shops affected?
Retailer statements and reports say some affected shops operated outside chains’ central networks or used their own refrigeration equipment. That may leave separate controllers with different protections, but investigators have not published a complete technical account of how each site was accessed.
Source: ThorstenMeyerAI.com
