In brief
EU officials confirm that supermarket refrigeration systems were targeted in Ireland, Belgium, Luxembourg, the Netherlands, Sweden, Estonia, and Finland, forcing retailers to discard food. The Commission urges careful attribution while convening coordinated meetings with Europol and national authorities to share information and strengthen resilience.
On Monday, supermarket refrigeration systems in seven EU member states were hit by coordinated cyberattacks, the European Commission announced, noting the incidents were "not isolated" and urging that attribution should be handled with caution.
Retail outlets across Ireland, Belgium, Luxembourg, the Netherlands, Sweden, Estonia and Finland reported power failures in their free‑zeros and cold‑rooms, leading to the discarding of perishable goods and potential supply‑chain disruptions.
The Commission said the attacks forced a wave of food waste, as several retailers abandoned products that could not be preserved, especially in jurisdictions where contingency storage was limited.
Commission spokesperson Thomas Regnier told a midday press briefing that the incidents underscored the vulnerability of essential services and highlighted the need for collective resilience in the face of cyber threats that can affect everyday life.
Regnier said: "I would be extremely careful when it comes to attributions. It's not for us to do for now."
Coordinated Response Efforts
Two coordination meetings were convened on Tuesday: the first gathered an EU inter‑institutional task force, Europol and EU commission departments, focusing on information exchange and rapid response strategies.
The second meeting later that morning brought together national authorities from the affected member states through the European Cyber Crisis Liaison Organisation Network, allowing a broader assessment of the incidents’ scope and possible escalation risks.
Both sessions aimed to share operational details, coordinate procurement of spare parts for refrigeration units, and discuss preventive measures to safeguard critical retail infrastructure.
Regnier emphasized the priority of combining technical investigations with procurement and operational support, while also ensuring that the data collected remains available to national investigators.
Open Questions and Next Steps
So far, the Commission has not linked the attacks to any specific threat actor, and it has reiterated that it would be premature to assign responsibility based on incomplete evidence.
National authorities are conducting technical forensic analyses to determine whether the attacks stem from a state‑backed campaign, organized crime, or a lone threat actor, and to assess whether the incidents are part of a larger pattern of cyber sabotage.
EU officials are also evaluating the adequacy of current regulatory frameworks governing supply‑chain security, and whether new safeguards will be required for essential refrigeration infrastructure.
In the immediate term, the Commission plans to host further coordination meetings, enhance information sharing among member states, and support retailers in restoring power and protecting food supplies.
While no definitive attribution has emerged, the collective response illustrates the EU’s commitment to coordinated cyber‑defence at a time when digital threats increasingly target critical everyday services.
