🔍 Read the full analysis: A New Perspective On AI And European Freezer Attacks on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Retailers and authorities reported remote tampering with supermarket refrigeration systems overnight from Nov. 1 to 2, affecting more than 115 stores across at least six countries, according to BleepingComputer. The reported method resembles attacks in France in October, but investigators have not identified a perpetrator or confirmed any role for AI.
Supermarket refrigeration systems in at least six European countries were remotely altered overnight from Nov. 1 to 2, causing freezer and chiller problems at more than 115 stores, according to BleepingComputer. Retailers and technicians described units switched into defrost or heating modes; Belgian authorities have opened an investigation, but no perpetrator has been identified and there is no confirmation that AI was used.
Reports from Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia describe affected stores, with Finnish authorities and retailer Kesko also reporting temperature anomalies at a few smaller Finnish locations. The precise count remains unsettled: BleepingComputer reported more than 115 stores across six countries, while The Record cited more than 50 affected in Belgium alone. Store totals vary across media and company accounts, and reports may not use identical counting methods.
In Belgium, refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that technicians began disconnecting installations from about 1 a.m. He said around 20 of the several hundred installations his company manages were affected, and that the controllers were attacked directly through internet access. The Belgian broadcaster VRT NWS reported freezers at a Delhaize store in Eeklo had reached 50 °C. A Proxy Delhaize in Hoepertingen reported temperatures of 15 °C and estimated that at least €60,000 of food had to be discarded, according to local reporting cited by VRT.
Retailers described incidents at different scales. Ahold Delhaize said it had identified an IT incident affecting refrigeration systems in several dozen stores; BleepingComputer put the number at about 40 locations in Belgium and Luxembourg. Carrefour Belgium said 15 of its 700 stores were affected, with no hypermarkets among them. Sweden’s ICA reported at least four affected stores outside its central network, while Coop said seven of its more than 800 stores were affected. The reported incidents also included Irish SuperValu stores and smaller independent businesses in the Netherlands and Finland.
Incident brief · Europe · November 2026
A New Perspective On AI And European Freezer Attacks
An overnight disruption reportedly altered supermarket refrigeration across Europe. The equipment impact is emerging; the perpetrator, exact scale and any connection to AI remain unconfirmed.
Remote changes, real-world effects
Retailers and technicians described refrigeration units switched into defrost or heating modes. That can put perishable stock at risk and disrupt store operations.
Controllers reportedly reached online
Belgian installer Sabcobel said attackers directly accessed controllers through internet connectivity. Investigators have not publicly detailed the exploited weakness.
Different systems, different outcomes
Accounts range from stopped units to partial operation and equipment generating heat. Temperatures and losses varied by location.
Stock losses were reported
A Proxy Delhaize in Hoepertingen estimated at least €60,000 of food had to be discarded. The full extent of losses is not established.
Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller Finnish locations. Published country groupings and store totals vary.
The count is still unsettled
Media and company accounts do not use one consolidated verified list. These figures reflect different reporting scopes and should not be added together.
Stores across six countries were reported affected. The report includes locations in Belgium and Luxembourg, among others.
Affected stores in Belgium alone were cited. Differences in source, timing and counting methods may explain the gap.
Several dozen stores
The company said it identified an IT incident affecting refrigeration systems. BleepingComputer put the Belgium and Luxembourg figure at about 40 locations.
15 of 700 stores
The retailer said affected locations were in Flanders and Wallonia; no hypermarkets were among them.
At least 11 stores
ICA reported at least four affected stores outside its central network. Coop said seven of its more than 800 stores were affected.
Keep the AI claim in perspective
The article title raises the question, but the reporting supplied here does not establish AI involvement in this incident.
Remote refrigeration changes
Retailers and technicians described units switched into defrost or heating modes during the overnight event.
Use of AI
No authority or company cited in the reports confirmed that AI was used. General warnings about AI-enabled attacks do not prove a role here.
Identity and links
No perpetrator or motive has been identified. Public information does not establish whether the French and November incidents share an actor.
A reported parallel in France
The November reports followed an earlier refrigeration incident in France on the night of October 11–12.
About 700 victims counted
The Paris prosecutor’s office counted about 700 victims in the earlier case, according to the source material.
Exposed interfaces flagged
France’s cybersecurity agency warned that remote-management interfaces for refrigeration controllers had been exposed online contrary to good practice.
Similarity is not attribution
Sabcobel described the mechanism as “exactly the same.” That is an installer’s comparison, not a public forensic finding linking the incidents.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
Ahold Delhaize“Currently 15 of our 700 stores are affected, both in Flanders and Wallonia.”
Carrefour BelgiumEvidence before conclusions
Investigators and retailers will need to establish how controllers were reached, which systems were accessed and whether the events are connected.
Risks to Food and Store Operations
The immediate impact is on food safety, stock losses and store operations. Refrigeration is building infrastructure rather than a customer-facing computer service, but remotely accessible controls can affect physical equipment and perishable goods. The reports of spoiled stock show how a change to a building system can create direct costs even without evidence of a break-in or disruption to a retailer’s central network.
Several affected retailers said the stores were outside their central safeguards or used separate refrigeration equipment. That does not establish why those locations were vulnerable, but it points to a practical concern for businesses: independently operated outlets and older or separately managed systems may not be covered by the same controls as a chain’s central IT environment. The scope and cause still require confirmation from investigators.
The article’s reference to AI should be treated cautiously. Belgium’s cyber centre has warned of a general rise in attacks partly involving AI, according to the source material, but no authority or company cited in the reports said AI was used in this refrigeration incident. There is no confirmed AI connection at present.
Products Worth Considering
LG UltraGear 34GX90SA-W 34-inch WQHD Curved OLED Gaming Monitor
Samsung 49-Inch Odyssey G93SC QD-OLED Curved Gaming Monitor
Samsung 32-inch Odyssey OLED G8 (G80SH) 4K QD-OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Similar French Incident in October
The reported November incidents follow an earlier wave in France on the night of Oct. 11 to 12. The Paris prosecutor’s office counted about 700 victims in that case, according to the source material. French cybersecurity agency CERT-FR warned on Oct. 12 that remote-management interfaces for refrigeration controllers had been exposed online contrary to good practice, and said attack campaigns were probably still ongoing.
Belgian installer Sabcobel said the mechanism in the latest incident was “exactly the same” as in France: evaporators were reportedly switched remotely into defrost mode. That is a comparison attributed to the installer, not a public forensic finding establishing that the same person or group was responsible. The available reports point to internet-reachable controllers as the route used, but do not describe a confirmed identity or motive.
Company accounts also suggest the incidents were not uniform. Carrefour said only some refrigeration units, mainly freezers, were affected, while Coop described impacts ranging from fully stopped units to partial operation and one case in which a system began generating heat. Temperatures reported by outlets differed, so a single figure should not be treated as representative of every store.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Attribution and AI Remain Unconfirmed
Who carried out the attacks is unknown. The source material reports no attribution and no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation, while the Belgian cyber centre has warned that the attacker may never be identified. The public information does not establish whether the November incidents and the French wave were carried out by the same actor.
It is also unclear exactly how many businesses were affected. Published counts differ, and reports describe different national and retailer groupings. Finnish authorities and Kesko reported a few affected smaller stores, adding to uncertainty over the country total. The source material does not provide a consolidated count based on a single verified list.
No evidence cited in the reports confirms that AI was involved, or explains how operators reached each controller, what security weaknesses were exploited, or whether all affected systems used the same equipment and software. The reported temperature readings and food losses are specific to individual locations; their full extent has not been independently established in the available material.
Investigators and Retailers Review Systems
Belgium’s criminal investigation is underway, and affected retailers and technicians will need to establish which systems were accessed, how they were reached and whether the incidents are linked across countries. Authorities may release more detail as forensic work progresses. The source material does not give a date for a public update or say when investigators expect to conclude.
Businesses are also likely to check remote access to refrigeration controllers and review whether separate stores and independently operated outlets fall under their security procedures. French CERT-FR had already warned about exposed remote-management interfaces after the October incidents. Whether that warning led to changes at the systems affected in November, and whether relevant manufacturer updates were applied, is not established by the reporting supplied here.
For now, the confirmed picture is a multi-country disruption reported by retailers and authorities, with some equipment switching into defrost or heating modes and food losses at certain sites. The next major developments are likely to be a clearer verified count, further technical findings and any official statement on responsibility. Until then, claims about the attacker’s identity or AI’s role remain unconfirmed.
Key Questions
Which countries reported affected stores?
Reports cited by BleepingComputer identified Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and Kesko also reported temperature problems at a few smaller stores in Finland, so the precise country and store totals remain unsettled.
How many stores were affected?
BleepingComputer reported more than 115 stores across six countries. Other reports gave different figures, including more than 50 in Belgium according to The Record. The available reports do not provide one reconciled, independently verified total.
Has anyone been identified as responsible?
No. The source material reports no attribution and no claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation.
Was AI used in the attacks?
That has not been confirmed. Although Belgium’s cyber centre has warned about a broader increase in attacks partly involving AI, the reports do not say AI was used to target the refrigeration systems.
What happened to the refrigeration equipment?
Retailers and technicians reported units switched into defrost or heating modes, or otherwise unable to maintain normal temperatures. Effects differed by store, and some businesses reported food losses; the incidents were not described as identical at every location.
Source: ThorstenMeyerAI.com
