🔍 Read the full analysis: AI And The New Security Questions Facing European Supermarkets on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Retailers and media reported that more than 115 supermarkets and other businesses across at least six European countries experienced refrigeration problems overnight on November 1–2, 2026. Belgian authorities have opened an investigation; the reported method resembles an October attack in France, but responsibility and any role for AI remain unknown.
Refrigeration systems at more than 115 stores and businesses in at least six European countries were disrupted overnight on November 1–2, according to reporting by BleepingComputer and information from retailers and authorities. The incidents affected freezers and cold rooms, with some systems reportedly switched to heating or defrost; Belgium has opened a criminal investigation, but no perpetrator has been identified and authorities have not said whether AI was involved.
The reports span Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller Finnish stores. Counts vary by source and remain provisional. In Belgium, retailer statements and broadcaster reports described incidents affecting dozens of locations, including stores operated independently of chains’ central systems.
Belgian refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that technicians began disconnecting installations during the night. He said around 20 of the several hundred installations his company manages in Belgium were affected. Sabcobel said the company itself was not hacked; according to Moelans, attackers reached internet-accessible controllers at stores.
The reported consequences ranged from disrupted equipment to spoiled food. VRT NWS reported that a butcher in Antwerp noticed tampering around 3 a.m. and stopped its systems in time. A Proxy Delhaize in Hoepertingen said its freezers reached 15 °C, rather than about minus 22 °C, and estimated that at least €60,000 of food had to be discarded, according to local reporting cited by VRT. Other businesses also reported food losses, but the overall financial damage has not been established.
Cross-border incident · Reported November 2, 2026
AI And The New Security Questions Facing European Supermarkets
Overnight refrigeration disruptions affected more than 115 supermarkets and other businesses across at least six European countries, according to reports. Investigators have not identified who was responsible, and no AI role has been established.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
— Ahold DelhaizeWhat is known: systems were disrupted. What remains open: the attacker, full scale, losses and any AI involvement.
A cold-chain disruption across borders
Retailers, media and authorities reported refrigeration problems at supermarkets and other food businesses. Freezers and cold rooms were affected; some systems were reportedly switched to heating or defrost mode. Counts vary by source and remain provisional.
Across Europe
Reports named Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores.
Store-level systems
Sabcobel CEO Stephan Moelans said technicians began disconnecting installations overnight. About 20 of the several hundred systems his company manages in Belgium were affected, he said.
Uneven consequences
Some businesses reported food losses and emergency work. A butcher in Antwerp reportedly stopped its systems in time; other locations faced spoiled stock.
A Proxy Delhaize in Hoepertingen said freezers reached 15 °C instead of about −22 °C. Local reporting cited by VRT estimated at least €60,000 in food had to be discarded. This is one store’s estimate, not a total for the incident.
Refrigeration is part of food security
Connected building equipment can affect food safety and daily store operations. A temperature change can put perishable stock at risk, trigger emergency technician visits and force businesses to discard products.
Temperature is the signal
When cold rooms drift out of range, store teams must check equipment and stock quickly. Outcomes can differ significantly from one location to another.
Small systems, large stakes
The reported €60,000 estimate illustrates the possible cost at one site. The financial impact across all affected businesses has not been established.
Protection varies by site
Some affected locations reportedly operated outside chains’ central networks or used their own refrigeration systems. That can mean different levels of protection and monitoring.
A similar French incident came weeks earlier
On October 11–12, a similar wave was reported in France. The Paris prosecutor’s office counted about 700 victims, according to the source material. Sabcobel described the latest mechanism as “exactly the same,” saying evaporators had been remotely switched into defrost mode.
About 700 victims counted by the Paris prosecutor’s office.
CERT-FR warned that refrigeration controller interfaces were exposed online against good practice.
Reports described disrupted systems across multiple countries and store networks.
Belgian authorities opened a criminal investigation; no responsible party has been named.
“Currently 15 of our 700 stores are affected, both in Flanders and Wallonia.”
— Carrefour BelgiumInternet-reachable controllers are a reported characteristic, not a complete forensic account.
Technical route across every location remains unconfirmedRisk context is not evidence of use
The source material discusses AI as a wider security concern. Belgium’s cyber centre has warned generally about cyberattacks that may involve AI, but no authority or company cited in the reports said AI was used to access or alter these refrigeration controllers.
Disruption reported
Refrigeration systems at supermarkets and other businesses were affected during the overnight period.
Attacker unknown
No claim of responsibility or official attribution is reported. Investigators may not identify the attacker.
AI involvement unknown
No cited evidence confirms AI use. A general warning about AI-related cyber risks does not establish a role in this incident.
Counts, losses and attribution are still developing
Reports cover different retailers and locations and may reflect updates at different times. The public picture is a cross-border disruption with uneven effects and incomplete counts.
More than 115 businesses were reported across at least six countries, with additional Finnish cases. The exact total is unsettled.
It is unclear whether every November incident, or the French and November waves, share a responsible party.
Retailers and refrigeration providers are assessing installations. No timetable for restoring every affected unit has been reported.
What readers should know
How many stores were affected?
BleepingComputer reported more than 115 stores and businesses in at least six countries. Counts vary among reports and remain provisional.
Which countries reported incidents?
Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia were named. Finland also reported anomalies at a few smaller stores.
Has anyone been identified?
No. Belgium’s federal prosecutor opened a criminal investigation, but the reports contain no attribution or claim of responsibility.
Was AI used?
That is unknown. No source cited here says AI was used in these incidents.
What happened to the food?
Some businesses reported spoiled stock. One Belgian store estimated at least €60,000 in losses; no total across locations has been established.
What happens next?
Retailers and providers are checking affected systems and food stock. Investigators have not published a timetable for further findings.
Food Losses and Store Disruption
Refrigeration is a basic operating system for supermarkets, but these incidents show how internet-connected building equipment can affect food safety and store operations. A changed temperature can put perishable stock at risk, require businesses to discard products, and prompt emergency work by technicians. The reported €60,000 estimate at one Belgian store illustrates the potential cost, but it should not be read as a total for the wider incident.
The pattern also raises questions for retailers that rely on independent franchisees, small shops or older equipment. Several companies said affected locations operated outside their central networks or used their own refrigeration systems. That does not establish that central networks are immune; it does indicate that protection and visibility may differ from one site to another. The immediate public-interest issue is how businesses secure remote access to equipment that can affect food supplies.
The source material discusses AI as a possible wider security concern, not as a confirmed feature of this attack. Belgium’s cyber centre has warned generally about cyberattacks that may involve AI, but no authority or company cited in the reports said AI was used to access or alter these refrigeration controllers. No AI link has been established.
Popular right now
Dyson Airwrap i.d. Multi-Styler for Straight and Wavy Hair
Ninja Foodi 8-Quart DualZone 6-in-1 Air Fryer, Grey (DZ201)
De'Longhi Dinamica Plus Fully Automatic Espresso Machine
As an affiliate, we earn on qualifying purchases.
A Similar French Incident
The November incidents were reported less than three weeks after a similar wave in France on the night of October 11–12. The Paris prosecutor’s office counted about 700 victims in that case, according to the source material. Belgian installer Sabcobel described the mechanism in the latest incidents as “exactly the same” as in France, saying evaporators had been remotely switched into defrost mode.
France’s national cybersecurity agency, CERT-FR, warned on October 12 that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. It said attack campaigns were “probably still ongoing.” That warning provides relevant technical context, but it does not identify who carried out either wave or prove that every affected store was compromised through the same route.
The November reports point to internet-reachable controllers and, in some cases, sites outside retailers’ central networks. Those are reported characteristics, not a full forensic account. The source material does not establish a single confirmed entry method for every country or store.
““We have identified an IT incident affecting the refrigeration systems in several dozen stores.””
— Ahold Delhaize
Attribution and AI Remain Unknown
Who carried out the attacks is unknown. The source material reports no claim of responsibility and no attribution by authorities. Belgium’s federal prosecutor has opened a criminal investigation, while the Belgian cyber centre has warned that investigators may never identify the attacker.
The exact number of affected businesses is also unsettled. BleepingComputer reported more than 115 across six countries, while other outlets gave different totals for Belgium and described additional Finnish cases. The reports cover different retailers and locations, and may reflect updates at different times. Temperature readings and equipment damage also varied from store to store.
It is not yet clear whether all incidents were carried out by the same actor, whether the French and November waves share a responsible party, or how attackers gained access in each case. No evidence cited in the source material confirms AI use; a general warning about AI-related cyber risks is not evidence that AI played a role here.
Investigators and Retailers Respond
Belgium’s criminal investigation is underway, and retailers and refrigeration providers are assessing affected installations. Store-level checks will determine the extent of food loss and whether systems are safe to return to service. The reports do not give a timetable for the investigation or a confirmed schedule for restoring every affected unit.
Authorities and companies may provide further details about the controllers involved, remote access and protective measures as their reviews proceed. For now, the confirmed picture is a cross-border disruption with uneven effects and incomplete counts—not a public attribution. Responsibility, the full scale of losses and any AI involvement remain unresolved.
Key Questions
How many stores were affected?
BleepingComputer reported more than 115 stores and businesses in at least six countries. Finnish authorities and Kesko also reported anomalies at a few smaller stores. Counts vary among reports and remain provisional.
Which countries reported incidents?
Reports named Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia. Finnish authorities and retailer Kesko also reported cases in Finland.
Has anyone been identified as responsible?
No. Belgium’s federal prosecutor has opened a criminal investigation, but the source material reports no attribution and no claim of responsibility.
Was AI used in the attacks?
That is unknown. Officials have discussed AI as part of broader cyber-risk concerns, but no source cited here has said AI was used in these incidents.
What happened to the food in affected stores?
Some businesses reported spoiled stock. A Proxy Delhaize in Hoepertingen estimated at least €60,000 in food losses, according to local reporting cited by VRT NWS. A total loss estimate across all affected locations has not been established.
Source: ThorstenMeyerAI.com
