Overview
- Delhaize reported an IT incident that affected roughly forty Belgian supermarkets, and the company has disconnected all refrigeration systems from the internet while it investigates.
- Reports from national media and agencies show related incidents in Sweden, France, Luxembourg, Ireland, Estonia and the Netherlands, with at least 17 smaller Dutch businesses hit.
- Attackers changed temperature controls up to reported highs of 50–70°C by abusing built‑in defrost/heating functions that are remotely programmable on commercial refrigeration systems.
- Security firms and national agencies point to vulnerable or unpatched remote‑management software — notably older Danfoss control systems and weak/default credentials — as the likely entry points.
- Authorities say attribution remains uncertain as investigations continue, but the disruptions have already forced disposal of stock (reported losses above €60,000), raised questions about supply resilience and prompted calls to harden internet‑connected retail equipment.