Supermarket Cyberattacks Spread Across Europe: EU Vows Collective Response as Food Spoils

Supermarkets in Germany, Romania, and the United Kingdom experienced cyberattacks that disrupted refrigeration systems, leading to spoiled food. Officials reported that the number of affected European countries has now reached at least 11. The European Union has pledged a unified response, emphasizing that these incidents, which have resulted in the loss of tonnes of food across the continent, are "not isolated." The motive behind the cyberattacks remains unknown, and no group has claimed responsibility. A Romanian official indicated that a state actor is not suspected.

On Monday, problems were reported in at least nine EU countries, including Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden. By Tuesday, officials and company representatives confirmed that four supermarkets in Germany and six in Romania were affected. The UK, though not an EU member, was also impacted.

Thomas Regnier, an EU spokesperson, stated that the bloc's agencies are collaborating with national authorities to formulate a joint strategy. "These are not isolated incidents, and of course, we have to be collectively resilient and prepared for such cyber incidents," he remarked, declining to identify potential perpetrators.

Dan Cimpean, director of Romania’s National Cyber Security Directorate, described the attacks as "semi-amateurish" and stated, "We do not suspect, under any circumstances, that it is a state actor." He also confirmed that "no other infrastructure was compromised." Belgium was significantly affected, with numerous stores experiencing refrigeration failures, prompting an investigation by federal prosecutors.

In Italy, approximately 20 supermarkets were affected. Giuseppe Spadaro, director of a group managing Coop supermarkets in Sicily, reported that four of their 300 stores suffered damage amounting to thousands of euros, forcing them to discard all perishable goods. Following the attacks, Italy's government held discussions with intelligence services and the National Cybersecurity Agency. Prime Minister Giorgia Meloni's office characterized the impact as "limited," assuring that "there is no cause for alarm, although all the relevant institutional bodies remain on high alert."

In the UK, attempts were made to target small meat-processing firms, but the National Cyber Security Centre (NCSC) reported a minimal impact. Richard Horne, CEO of the NCSC, informed the BBC that the issue affected "the whole food supply chain" and involved the exploitation of "vulnerable technology."

This series of attacks bears resemblance to a cyberattack in October that affected hundreds of supermarkets in France and other European countries. In Sweden, the supermarket chain Coop reported that refrigeration units at seven of its stores, connected to "old 4G networks," had been affected but have since returned to normal operation. Coop has expedited an upgrade to 5G networks and modern modems, a process initiated after the October attacks, according to spokesperson Carlos Cancinos.

Danfoss, a manufacturer of refrigeration controls, confirmed its systems were among those targeted and advised customers to ensure their systems are not directly accessible from the internet. Cybersecurity expert Frank Groenewegen of Deloitte recommended that retailers verify their refrigeration controllers' internet connectivity and security update status, advising immediate disconnection from the public internet if unsure.