Delhaize

Summary

A cyberattack targeting refrigeration systems disrupted several dozen Delhaize stores in Belgium, temporarily limiting the availability of fresh and frozen products while distribution centers and deliveries remained unaffected. Similar incidents hit other European retailers, including five Colruyt Group shops, fifteen Carrefour locations in Belgium, and seven Coop stores in Sweden where some units shut down completely, partially malfunctioned, or generated heat, though affected companies described the overall impact as limited and contained.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

A fresh wave of cyberattacks targeting refrigeration systems disrupted supermarkets across Europe, with breaches reported in Sweden, Belgium, and Luxembourg and details emerging on 3 November 2026. The incidents resembled a similar attack that had affected hundreds of French supermarkets the previous month. Among the major retailers affected was Delhaize in Belgium, which is part of the Netherlands-based Ahold Delhaize group. A company spokesperson for Delhaize stated that several dozen of its stores were hit by the attacks. In a statement issued just before 17:00 CET on 2 November, the spokesperson said that in the affected stores, the range of fresh and frozen products was temporarily somewhat limited. The spokesperson also confirmed that Delhaize's distribution centres were operating normally and that there had been no disruption to deliveries to its stores. The identity of those behind the latest apparent attacks remained unknown at the time of reporting.

Other retailers in Belgium reported comparable disruptions to their refrigeration infrastructure. Colruyt Group, which operates Spar stores in Belgium under a franchise model, saw five of its shops experiencing attacks on their refrigeration systems. Carrefour issued a statement acknowledging the breach at its stores in Belgium and described the impact as extremely limited, confirming that 15 of its more than 700 stores in Belgium were hit while none of its hypermarkets experienced disruption.

In Sweden, a spokesperson for Coop said that seven of its more than 800 stores were affected and that the situation was contained and under control. The issues reported by Coop ranged from completely shut-down refrigerators and freezers to partially functioning units, and in one case the system began to generate heat. Fellow Swedish retailer ICA also reported an incident at a limited number of stores that use an external supplier, though it said its central systems were not affected. The attacks targeted operational refrigeration equipment in affected stores, leaving the range of fresh and frozen products temporarily constrained while distribution centres and delivery operations continued without disruption.

Sources

Sources available to members: 3 sources.