Mystery Cyberattack Spikes Supermarket Freezers Across Seven European Nations

Supermarket freezers across seven European nations just spiked to 50°C (122°F). That is 122 degrees Fahrenheit. The heat cooked food inside units that should have been freezing cold. This wasn't a glitch. Cybersecurity agencies are confirming an unprecedented cyberattack hit roughly 40 Delhaize supermarkets in Belgium and Luxembourg. Smaller numbers of stores in Ireland, Sweden, Estonia, Finland, and the Netherlands took similar hits. No ransom note. No hacker claiming credit. No obvious financial motive. That silence is what keeps experts up at night.

The timing feels deliberate. Weeks earlier, hundreds of French supermarkets suffered a nearly identical incident. Meanwhile, US authorities are digging into refrigerator malfunctions on American military bases back in August. Are these connected? Some analysts believe so. They suspect a state-sponsored sabotage campaign designed to remain deniable.

Tom Hegel, Distinguished Threat Researcher at SentinelOne, sees the pattern clearly. "Ransomware groups usually try to get paid, and hacktivists usually want the public credit," he told the Daily Mail. "In this case, neither has happened, which makes it start to look like the low-cost, deniable sabotage Europe has been dealing with for several years, from damaged undersea cables to warehouse arson and GPS jamming."

Why supermarkets? It is easy prey. These chains run massive networks of refrigeration controllers, door access panels, and building management systems. Contractors often install these devices without consulting cybersecurity teams. The result is a sprawling web of vulnerabilities. One bad move can disrupt supply chains and bleed companies dry. But the danger extends far beyond spoiled groceries.

Imagine the same attack hitting a pharmaceutical warehouse. Critical medicines could spoil. Deadly shortages would follow. The financial loss would be staggering. Dan Bird, EMEA Field CTO at Horizon3, warns that the threat is not limited to retail. "The attack on supermarket refrigeration shows that any device with an internet-facing connection can be a target," he said. "Almost anything linked to a central system could be exposed."

If a grocery store fridge can be hacked, what happens to life-saving equipment in hospitals? Or the traffic lights guiding rush-hour commuters? Experts warn that almost any connected device is now a potential target. The attack vector is broad. The consequences are severe. And with thousands of these interfaces still online, expect more incidents like this. The next target might not be your food. It could be your safety.

Imagine a hospital pharmacy where the temperature drifts by a single degree. Millions of pounds worth of life-saving drugs spoil. Blood samples turn useless. That is not a hypothetical scenario; it is the nightmare warning experts are issuing right now. In healthcare and pharmaceuticals, precision is everything, and an attack on those digital systems could severely disrupt patient care, creating immediate, life-threatening shortages.

The problem is growing faster than anyone can patch. As more devices hook into the internet for the sake of convenience, the "attack surface" for hackers balloons. It gets worse when you realize chunks of our critical infrastructure are so ancient that modern cybersecurity controls cannot even be installed. Add in the fact that AI is accelerating the rate at which attackers find vulnerabilities, and suddenly, almost any connected device is a potential target.

Experts speaking to the Daily Mail warn that the scope is terrifyingly broad. We are talking about water treatment plants, power grids, traffic lights, and even the lifts in your office building. Remember the crosswalks in Denver earlier this year? Hackers hijacked them to blare vile messages about the president. That was a stunt. What concerns security firms is what happens when the targets are essential for survival.

Marijus Briedis, Chief Technology Officer at NordVPN, points out a grim reality: criminals do not need to steal a single customer record to bring a business to its knees. Interfering with heating, ventilation, access controls, or connected machinery can paralyze a building. "The consequences depend on what the compromised system controls and what safeguards are in place," Briedis told the Daily Mail. "An attack could leave staff unable to enter part of a building, stop production or interfere with temperatures in a warehouse."

Rob Demain, CEO of cybersecurity company e2e-assure, sees the danger extending to building and lift systems, which are increasingly internet-connected. The possibilities are horrifyingly specific. "Manipulating the digital controllers of lifts could trap occupants between floors, halt ventilation, create panic, or shut down emergency evacuation and fire-service lift modes during an active fire," Demain explained.

It does not take a sophisticated weapon to cause devastation. Simple building controls can be turned into weapons. Demain warns that disabling air conditioning, chilling plant loops, or positive pressure systems in data centers causes thermal runaway and server destruction within minutes. In a different setting, the stakes are even higher. "In pharmaceutical cleanrooms or hospitals, tampering with temperature destroys sterile environments, invalidates vaccine or blood storage, and contaminates surgical theatres," he said.

But the biggest fear remains the threat to Britain’s critical infrastructure itself. Dan O'Dowd, CEO of Green Hills Software, argues that we have handed enemies the keys to the kingdom. "Connecting our power grid, water treatment plants, and other critical infrastructure to the internet with software riddled with millions of bugs and security defects has turned these systems into weapons of mass destruction in the hands of our enemies," O'Dowd told the Daily Mail. He warns that hackers, rogue states, and terrorists could all exploit these defects.

The impact would be total. "A cyberattack on Britain's critical infrastructure would take the country back to 1820. We cannot survive without our critical infrastructure," O'Dowd stated. Supermarkets would empty out. Electricity and water would stop flowing to homes. Transport networks would paralyze. Without electricity or clean water, society would collapse within a matter of weeks.

It would be a total catastrophe."

That stark warning arrives alongside the release of the National Cyber Security Centre (NCSC) Annual Review. The document flags a grim timeline: by 2028, the UK’s critical national infrastructure must brace for a ransomware attack driven by AI-powered malware. This is not a distant hypothetical. It is a looming threat with a specific date attached.

The report does not mince words about who is behind the curtain. It warns that nation-states like China and Russia will "routinely" deploy AI within their cyber operations to achieve geopolitical goals. The stakes are high, and the methods are evolving rapidly.

Dr Richard Horne, CEO of the NCSC, is set to address this reality in a speech today. He expects to tell his audience: "In the coming months, we face a real prospect of an unprecedented rise in the number of cyber incidents." The urgency in his tone is palpable.

Graeme Stewart, head of public sector at Check Point, weighed in on the findings. Speaking to the Daily Mail, he offered a blunt assessment of the current state of affairs. "The NCSC is warning that AI-powered ransomware could hit Britain's critical infrastructure within two years, but the uncomfortable reality is that our essential services are already under attack, and have been for years," Stewart said.

He did not stop there. Stewart pointed a finger directly at the pace of government response. "Richard Horne is absolutely right to call out decades of underinvestment in cyber security, but frankly, it's a conversation we should have been having much more seriously 18 months ago."

The gap between the warning and the readiness is widening. The report paints a picture of defenders struggling against attackers who are leveraging artificial intelligence to scale their intrusions. For the UK, the next two years are not just a period of preparation; they are a countdown.