🔍 Read the full analysis: AI, Cyber Risk, And Europe’s Supermarket Refrigeration on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Retailers and media reported that more than 115 supermarkets and other businesses in at least six European countries experienced refrigeration problems overnight from November 1 to 2, 2026. Authorities and an installer say the method resembles an October attack in France, but the perpetrators and any role for AI remain unknown.
More than 115 stores and other businesses in at least six European countries reported refrigeration disruptions overnight from November 1 to 2, 2026, in a wave that Belgian installer Sabcobel says used the same remote defrost method as attacks on French shops in October. The incidents have prompted a Belgian criminal investigation, but no perpetrator has been identified, and there is no confirmed evidence that artificial intelligence was involved.
Reports listed affected sites in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia; Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores. The counts differ among outlets and companies. BleepingComputer reported more than 115 affected locations across six countries, while The Record reported more than 50 in Belgium alone. The available figures are not a single verified official total.
In Belgium, retailers and local reports described freezers being switched into defrost or heating modes. VRT NWS reported that a Delhaize store in Eeklo had freezers set to 50°C. A Proxy Delhaize in Hoepertingen reported temperatures of 15°C and estimated at least €60,000 in discarded food, according to Het Belang van Limburg as cited by VRT. Other shops said they stopped systems in time or lost food; the extent of damage across all affected businesses has not been established.
Companies reported disruptions at stores with different operators and equipment. Ahold Delhaize said an IT incident affected refrigeration systems in several dozen stores. Carrefour Belgium said 15 of its 700 stores were affected, while Coop Sweden reported seven affected locations among more than 800. Several retailers said affected sites were independently operated or outside their central networks. Those descriptions come from the companies and do not establish a single cause for every incident.
Cyber Risk / Critical Retail Systems / Europe
AI, Cyber Risk, And Europe’s Supermarket Refrigeration
More than 115 businesses reportedly faced refrigeration disruptions overnight on November 1–2, 2026. The method resembles an October attack in France. Who was responsible—and whether AI played any role—remain unknown.
“The same remote defrost method”
Installer’s account of the reported mechanism01 / The reported footprint
A cross-border disruption
Counts vary by outlet and company; these are reported figures, not a harmonised official total.
Retailers, authorities and media described an overnight wave affecting refrigeration systems at supermarkets and other businesses. Reports listed sites in Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores.
02 / What changed
Temperature controls became a business risk
Remote changes to building equipment can have immediate effects on stock, sales and store operations.
Retailers and installer Sabcobel said some refrigeration units were remotely switched into defrost or heating modes. Local reports described freezers in Belgium reaching unusually high temperatures. The full extent of damage across all affected businesses is not established.
Freezers set to 50°C
VRT NWS reported that a Delhaize store in Eeklo had freezers set to 50°C.
Food discarded
A Proxy Delhaize in Hoepertingen reported temperatures of 15°C, according to Het Belang van Limburg as cited by VRT.
Ahold Delhaize said several dozen stores were affected. Figures describe separate company reports and are not a complete count.
03 / A reported precedent
Similar method, earlier in France
A resemblance in method has been reported; a shared operator has not been established.
France
Refrigeration systems at hundreds of supermarkets were reportedly manipulated overnight.
CERT-FR warning
Remote controller management interfaces were exposed online contrary to good practice; campaigns were probably ongoing.
New reports
Businesses in multiple European countries reported refrigeration disruptions.
Investigation
Belgium’s federal prosecutor opened a criminal investigation; no suspect was identified in supplied reports.
04 / Corporate systems
Different operators, uneven exposure
Company descriptions offer context, but do not establish one cause across every affected location.
Some retailers said affected sites were independently operated or outside their central networks. Reports also included businesses with different operators and equipment. These statements do not show that every site had the same network setup or that separation alone would have prevented the incidents.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”Ahold Delhaize
“Currently 15 of our 700 stores are affected, both in Flanders and Wallonia.”Carrefour Belgium
Controller reachable online or through remote management.
Settings may be altered, according to reported accounts.
Potential spoilage, interrupted sales and urgent repairs.
Check exposure, system safety and losses.
05 / What is known
Attribution and AI remain unclear
Keep confirmed reporting separate from open questions as the investigation develops.
Investigation is underway
Belgium’s federal prosecutor has opened a criminal investigation. Retailers and refrigeration providers are responding to affected systems and assessing losses.
No identified perpetrator
No suspect or group has been identified, and no one has publicly claimed responsibility in the supplied reporting. A shared operator with the French case is also unconfirmed.
AI use is unknown
Belgium’s cyber centre has warned generally about attacks that can involve AI. That warning is not evidence that AI found, accessed or operated these controllers.
Counts and losses may change
Public totals, country lists and damage estimates vary. Investigators have not released a complete technical account for each store.
06 / Open questions
What comes next?
Further findings could clarify scale, access paths and whether the incidents are connected.
How many businesses were affected?
Media reports put the total above 115 across at least six countries, with additional Finnish incidents. There is no final official total.
What happened to the systems?
Retailers and an installer said some refrigeration units were switched remotely into defrost or heating modes. A full technical account is not public.
Who was responsible?
No perpetrator has been identified in the supplied reporting. Belgium’s federal prosecutor is investigating.
Was AI used?
Unknown. No authority or retailer is reported as confirming AI involvement in this campaign.
Food Loss and Network Exposure
The incidents show how internet-connected building equipment can affect ordinary business operations, not just office computers or customer data. When refrigeration controllers are changed remotely, stores may face spoiled stock, disrupted sales and urgent repair work. The reported loss at Hoepertingen illustrates the potential cost for an individual shop, though the total financial impact across countries remains unknown.
The reports also point to a possible gap between central corporate safeguards and independently operated locations using separate or older systems. Retailers have described some affected stores in those terms, but the available reporting does not establish that this applies to every site or that network separation alone would have prevented the incidents. The practical concern is broader: equipment used to control temperature can become a cyber risk when remote interfaces are exposed or inadequately protected.
AI is part of the story’s framing, but not a confirmed feature of the attacks. Belgium’s cyber centre has warned of a broader rise in attacks that can involve AI; that general warning does not show that AI was used to find, access or operate these refrigeration systems. Keeping that distinction clear matters as authorities investigate the specific incidents.
Popular right now
Samsung 75-Inch M80H Series Mini LED 4K Smart TV (2026)
Jura E6 Automatic Espresso Machine, Piano Black (15622)
KitchenAid Artisan 5-Qt Tilt-Head Stand Mixer – Dried Rose (KSM150PS)
As an affiliate, we earn on qualifying purchases.
A Similar French Attack in October
The latest reports follow an overnight incident in France on October 11–12, 2026, when refrigeration systems at hundreds of supermarkets were reportedly manipulated. France’s CERT-FR warned on October 12 that remote management interfaces for refrigeration controllers were exposed online contrary to good practice, and said campaigns were probably still ongoing. The Paris prosecutor’s office counted about 700 victims in the French case, according to the supplied reporting.
For the November incidents, Sabcobel chief executive Stephan Moelans told Belgian media that evaporators had been remotely switched into defrost mode, describing the mechanism as “exactly the same” as in France. He said Sabcobel itself was not hacked and that internet-reachable controllers at stores were targeted directly. His account is a company representative’s description; investigators have not publicly confirmed a shared operator or a complete technical account.
The source material describes a cross-border pattern, but the public numbers vary. Reports give different store totals and temperatures, and some accounts include small independent businesses alongside supermarket branches. The figures should be treated as reported counts rather than a final, harmonised tally.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Attribution and AI Remain Unclear
No suspect or group has been identified, and no one has publicly claimed responsibility, according to the supplied reporting. Belgium’s federal prosecutor has opened a criminal investigation. Belgium’s cyber centre has warned that identifying the attacker may not be possible. It is also unclear whether the French and November incidents share an operator, beyond the reported similarity in method.
The exact number of affected locations, total food losses and full list of countries remain unsettled in public accounts. Some Finnish incidents were reported separately, and outlets use differing counts for Belgium and other countries. Investigators have not released a complete technical account of how access was obtained at each store.
AI use is unconfirmed. The source material cites a general warning from Belgium’s cyber centre about attacks partly involving AI, but no authority or retailer is reported as saying AI played a role in this campaign. Claims about AI-driven targeting or control would go beyond the available evidence.
Investigation and Store Response
Belgium’s federal prosecutor is investigating, while retailers and refrigeration providers are responding to affected systems and assessing losses. Further public findings may clarify how many businesses were reached, whether the incidents crossed borders through the same infrastructure, and whether the French and November attacks are connected.
Companies with affected stores will need to establish which controllers were exposed and whether systems are operating safely before normal service resumes. The source material does not provide a common timetable for repairs or a confirmed schedule for additional official findings. Until more detail is released, reported counts and technical explanations should be treated as provisional.
Key Questions
How many businesses were affected?
Media reports put the total at more than 115 stores or businesses across at least six countries, with additional Finnish incidents reported. Counts differ by outlet and are not yet a final official total.
What happened to the refrigeration systems?
Retailers and an installer reported that some refrigeration units were switched into defrost or heating modes remotely. Sabcobel said the method resembled the October attacks in France, but investigators have not published a complete technical account.
Who was responsible?
No perpetrator has been identified, and no group has publicly claimed responsibility in the supplied reporting. Belgium’s federal prosecutor has opened an investigation.
Was AI used in the attacks?
That is unknown. Belgium’s cyber centre has made a general warning about attacks that can involve AI, but no source cited in the reports confirmed AI was used in these incidents.
Were the November incidents linked to the French attacks?
The reported method was similar: remote manipulation of refrigeration equipment. That similarity does not by itself prove the same people were responsible, and no confirmed link has been announced.
Source: ThorstenMeyerAI.com
