🔍 Read the full analysis: A Look At AI Amid Europe’s Refrigeration Attack Wave on ThorstenMeyerAI.com
TL;DR
Retailers and news outlets reported that refrigeration systems at more than 115 stores across at least six European countries were disrupted overnight on Nov. 1–2. The reported method resembles an October incident in France, but the attacker has not been identified and there is no evidence in the cited reporting that AI was used.
Refrigeration systems at more than 115 stores across at least six European countries were reportedly disrupted overnight on Nov. 1–2, with some freezers switched into defrost or heating modes, according to reporting by BleepingComputer and other outlets. Retailers and technicians described spoiled food and equipment problems; authorities have not identified who was responsible, and no evidence cited so far shows that AI was used.
Reports from Belgium, the Netherlands, Sweden, Luxembourg, Ireland and Estonia describe affected supermarkets and smaller food businesses. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores. Counts vary by source and are still being reported. BleepingComputer put the total at more than 115 stores, while The Record reported more than 50 in Belgium alone.
In Belgium, refrigeration installer Sabcobel chief executive Stephan Moelans told Belgian media that technicians began disconnecting installations from about 1 a.m. He said about 20 of the several hundred installations his company manages in the country were affected, and that the controllers in stores had been reached directly through the internet. According to VRT NWS, a store in Eeklo had freezers set to 50 °C. A Proxy Delhaize in Hoepertingen reported temperatures of 15 °C and estimated at least €60,000 in discarded food, according to local reporting cited by VRT.
Retailers reported varying impacts. Ahold Delhaize said it had identified an IT incident affecting refrigeration systems in several dozen stores; BleepingComputer reported about 40 sites in Belgium and Luxembourg. Carrefour Belgium said 15 of its 700 stores were affected, involving a few refrigeration units, mainly freezers, and said none of its hypermarkets was among them. In Sweden, ICA reported at least four affected stores outside its central network. Coop said seven of its more than 800 stores were affected, with impacts ranging from stopped refrigeration to a unit beginning to generate heat.
Incident brief · Europe · Reported Nov. 2, 2026
A Look At AI Amid Europe’s Refrigeration Attack Wave
Refrigeration systems at more than 115 stores across at least six countries were reportedly disrupted overnight on Nov. 1–2. The reported method resembles an October incident in France. The attacker remains unidentified, and the cited reporting provides no evidence that AI was used.
01 / What is known
A multi-country disruption
Retailers, technicians and news outlets described overnight refrigeration problems across supermarkets and smaller food businesses. Counts differ by source and remain provisional. Finnish authorities and retailer Kesko also reported temperature anomalies at a few smaller stores.
Controllers reached online
Installer Sabcobel said technicians began disconnecting systems around 1 a.m. Its CEO reported about 20 affected installations among several hundred it manages.
Food and equipment at risk
VRT NWS reported a freezer in Eeklo set to 50 °C. A Proxy Delhaize in Hoepertingen reported 15 °C and an estimated €60,000 in discarded food.
Different store setups
Some affected locations were described as operating outside central networks or using separate refrigeration equipment. That does not establish a shared access path at every site.
“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”
Ahold Delhaize · As reported“Currently 15 of our 700 stores are affected, both in Flanders and Wallonia.”
Carrefour Belgium · As reported02 / Reported counts
Signals, not a final tally
Published totals vary across outlets and retailers. Country-level statements describe different scopes, so the figures below should not be added together as a single confirmed count.
Selected reported figures
Different sources, dates and scopes; shown as reported rather than as directly comparable totals.
03 / AI and attribution
Keep the claim in proportion
Belgium’s cyber centre has issued broader warnings about attacks that may involve AI. That general context is not evidence that AI played a role in this refrigeration disruption.
Remote controller access
Accounts describe refrigeration controllers being reached through the internet and units shifted into defrost or heating modes.
AI involvement
The source reporting does not show AI used for reconnaissance, access, or changing controller settings.
Who did it
No group or individual has been publicly identified in the cited reporting, and no claim of responsibility has been reported.
04 / Exposure chain
From connectivity to store-level loss
The reported risk concerns operational equipment connected to remote management. The available accounts do not establish that every affected site shared the same configuration or weakness.
Controller online
Some reports describe refrigeration control interfaces reachable over the internet.
Mode disruption
Units were reportedly switched into defrost or heating modes overnight.
Temperature rises
Freezers and other equipment faced abnormal temperatures and service interruption.
Food and cost
Stores reported spoilage and equipment problems; overall losses remain unknown.
05 / October comparison
A similar French incident
The latest reports recall a disruption in France on the night of Oct. 11–12. Similarity in the reported method is an investigative lead, not proof of a common attacker.
Refrigeration switched to defrost
France’s CERT-FR warned on Oct. 12 that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. It said campaigns were “probably still ongoing.”
Reported similarity, open questions
Sabcobel described the method as “exactly the same.” That is the installer’s assessment, not a public technical finding linking the incidents. The Paris prosecutor’s office put French victims at about 700, according to the source material.
06 / Investigation
What remains to be established
Belgium’s federal prosecutor has opened a criminal investigation. Retailers and refrigeration specialists are assessing affected systems and food loss; the source material gives no public timetable for findings.
Sites, access and links
Further findings may clarify how many businesses were affected, whether controllers shared a specific exposure, and whether authorities can connect this incident to the October event in France.
No settled total or attribution
The total financial damage, final site count, attacker identity and any common authorship remain unknown. The Belgian cyber centre has warned the perpetrator may never be identified, according to the supplied account.
07 / Key questions
What readers should know
A concise guide to the reported disruption and the limits of what is currently known.
What happened?
Reports say refrigeration controllers at stores in several European countries were remotely switched into defrost or heating modes overnight on Nov. 1–2.
How many stores were affected?
BleepingComputer reported more than 115 across at least six countries. Other outlets published different totals, so the count remains provisional.
Was AI used?
The cited reporting provides no evidence that AI was used. Broader warnings about AI-related cyberattacks do not establish a role here.
Who was behind it?
No attacker has been publicly identified in the source reporting, and no one has reportedly claimed responsibility.
Food Loss and Store-Level Exposure
The incident shows how an online connection to building equipment can create a direct operational risk: a compromised refrigeration controller may threaten food stocks even when a retailer’s core business systems are not reported to be affected. For stores holding perishable goods, a few hours of abnormal temperatures can mean significant waste, disrupted operations and costs. The reported estimate of at least €60,000 in losses at one Belgian store illustrates the possible scale, but it is a store-level estimate, not a confirmed total for the wider incident.
Several chains said affected locations operated outside central networks or had separate refrigeration equipment. Colruyt said its own stores were not affected, while some independently operated Spar stores were. ICA likewise said the affected sites were outside its central network. Those details point to differences in how store equipment is connected and managed; they do not establish how every affected controller was accessed or whether the same weakness existed at all sites.
The AI angle needs careful distinction from the confirmed reports. Belgium’s cyber centre has warned more generally about a rise in attacks that may involve AI, but the cited accounts do not report evidence of AI in this refrigeration incident. The confirmed concern is the reported exposure of remote-management interfaces, not a demonstrated use of AI to carry out the attack.
Popular right now
Dyson W1 PencilWash Cordless Wet and Dry Floor Cleaner with Dock
Jura E6 Automatic Espresso Machine, Piano Black (15622)
Philips 2200 Series Fully Automatic Espresso Machine with Classic Milk Frother
As an affiliate, we earn on qualifying purchases.
A Similar French Incident in October
The reported disruption follows an incident in France on the night of Oct. 11–12, when supermarket refrigeration systems were also reportedly switched into defrost mode. France’s CERT-FR warned on Oct. 12 that remote-management interfaces for refrigeration controllers were exposed online in ways that did not follow good practice. It said attack campaigns were “probably still ongoing.”
Belgian installer Sabcobel described the method in the latest reports as “exactly the same” as in France. That is an assessment attributed to the installer, not a public technical finding that establishes a shared attacker. The Paris prosecutor’s office has put the number of victims in the French incident at about 700, according to the source material.
The reported geographic reach and totals for the Nov. 1–2 incident differ among outlets. BleepingComputer counted more than 115 stores across six countries, while Belgian reports use different totals and ranges. The discrepancies, along with differing reported temperatures, mean the figures should be treated as provisional rather than as a settled incident count.
„“We have identified an IT incident affecting the refrigeration systems in several dozen stores.”“
— Ahold Delhaize
Attacker and AI Role Unknown
No group or individual has been publicly identified in the source reporting, and there is no reported claim of responsibility. Belgium’s federal prosecutor has opened a criminal investigation. Belgium’s cyber centre has warned that the perpetrator may never be identified, according to the supplied account.
It is also not yet clear how many businesses were affected, how much food was lost overall, or whether every reported disruption resulted from the same operation. The reported mechanism resembles the French incident, but that similarity alone does not prove common authorship. The source material also does not establish that AI was used for reconnaissance, access, or changing controller settings. The relationship between the AI framing and this specific attack remains unsubstantiated.
Investigators Trace Controller Access
Belgium’s federal prosecutor is investigating, while retailers and refrigeration specialists are assessing affected systems and the extent of food loss. The source material does not give a public timetable for results or identify a next announcement date. Further updates may clarify the number of affected sites, whether their controllers shared a particular exposure, and whether authorities can link the incident to the October attack in France.
For now, the confirmed public picture is a multi-country disruption reported by retailers, technicians and media, alongside an ongoing investigation and uneven incident counts. Any conclusion about the attacker, the total financial damage, or AI’s involvement should wait for technical findings or official statements.
Key Questions
What happened to the supermarket refrigeration systems?
Reports say refrigeration controllers at stores in several European countries were remotely switched into defrost or heating modes overnight on Nov. 1–2, disrupting temperatures in freezers and other units.
How many stores were affected?
BleepingComputer reported more than 115 stores across at least six countries. Other outlets published different country and store totals, so the count remains provisional. Finnish authorities and Kesko also reported problems at a few smaller stores.
Was AI used in the attacks?
The source reporting provides no evidence that AI was used. Belgium’s cyber centre has discussed AI in relation to a broader rise in cyberattacks, but that general warning does not establish a role in this incident.
Who was behind the disruption?
No attacker has been publicly identified, and no one has reportedly claimed responsibility. Belgian authorities have opened a criminal investigation.
Is this linked to the October attack in France?
The reported method resembles the Oct. 11–12 incident in France, and Sabcobel said it was “exactly the same” mechanism. That comparison has not publicly established that the same person or group carried out both incidents.
Source: ThorstenMeyerAI.com
