In brief
The European Commission confirmed on Tuesday that supermarket refrigeration cyberattacks in Ireland, Belgium, Luxembourg, the Netherlands, Sweden, Estonia and Finland were not isolated incidents and have led to widespread food discard. EU officials are coordinating investigations with Europol and national authorities, while spokesperson Thomas Regnier cautioned against premature attribution. Reports from Blackfog add that the attacks have caused significant food spoilage and financial loss, although no attacker has been named yet.
On Tuesday, the European Commission announced that refrigeration system hacks at supermarkets across several EU member states were part of a broader, coordinated cyber‑campaign, and that investigations are still ongoing. The attacks began on Monday in Ireland, Belgium, Luxembourg, the Netherlands, Sweden, Estonia and Finland, causing retailers to discard large quantities of food to avoid spoilage.
Commission spokesperson Thomas Regnier told a midday press briefing that the Commission was in direct contact with member states and had held two coordination meetings. He added:
"I would be extremely careful when it comes to attributions. It’s not for us to do for now,"and said the incidents underline the need for collective resilience.
The first meeting convened an EU interinstitutional task force, Europol and relevant Commission departments, while the second brought together national authorities through the European Cyber Crisis Liaison Organisation Network. Their focus was to share information about the incidents and decide how best to respond collectively.
According to a recent report from Blackfog, the supermarket cyberattacks disrupted refrigeration systems, leading to food spoilage and significant financial losses for retailers. The report also highlighted fears that the attacks could be part of a coordinated effort.
A separate briefing from a Brussels‑based outlet echoed the Commission’s warning that the incidents were not isolated but avoided naming any responsible party. The authorities continue to collect evidence before making any attribution.
