Cyberattack Disrupts Refrigeration in Swedish Supermarkets and Food Businesses

A cyberattack on November 3 disrupted refrigeration in Swedish supermarkets and food businesses, causing food spoilage and financial loss, with authorities warning of future threats.

Technology

Image: gp.se

Key details

  • Several Swedish supermarkets including Ica and Coop experienced refrigeration failures from a cyberattack.
  • Temperatures in coolers/freezers rose to around 50°C, causing extensive food loss and financial damage.
  • Small businesses like Studio Canteen in Stockholm were severely impacted, highlighting vulnerabilities.
  • Danfoss, a refrigeration supplier, was also affected, and NCSC warned of future risks, advising enhanced security measures.

On November 3, 2026, several Swedish supermarkets and food-related businesses suffered serious refrigeration failures due to a coordinated cyberattack. Temperatures in coolers and freezers at affected locations, including Ica Kvantum in Sjöbo and seven Coop stores in Gävle and Sundsvall, soared to nearly 50 degrees Celsius, leading to widespread food spoilage and financial losses estimated in the hundreds of thousands of kronor.

Small businesses like Marion Ringborg's Studio Canteen in Stockholm were also hit, where a fire alarm triggered by a freezer overheating led to extensive water damage and discarded high-value food items such as tuna and caviar. Ringborg highlighted the vulnerability of small businesses despite safety measures and plans to improve security by disconnecting coolers from network alarms.

The Danish supplier Danfoss, which provides cooling systems across Sweden, was similarly affected, having faced prior attacks disrupting stores in France. The National Cybersecurity Center (NCSC) is supporting the impacted businesses and issuing warnings about potential future attacks targeting food supply infrastructure, underscoring the critical nature of cybersecurity in this sector. NCSC advised companies to monitor connected refrigeration systems closely and ensure robust security protocols.

Cybersecurity expert Emil Olofsson suggested hackers gained access through exposed login credentials on internet-accessible control systems. Authorities continue investigations into the full scope and perpetrators of the attack, which also affected an Axfood consumer picking warehouse in Gothenburg.

The incidents have raised serious concerns about the vulnerability of Sweden’s food supply chain to cyber threats and the need for enhanced safeguards moving forward.

This article was translated and synthesized from Swedish sources, providing English-speaking readers with local perspectives.

Source articles (3)

  1. gp.se Nov 3, 2026

    Matbutiker hackade i Europa – Ica och Coop drabbade

  2. dn.se Nov 2, 2026

    Kocken Marion Ringborg: Enorma mängder vatten forsade ut

  3. dn.se Nov 2, 2026

    Cyberchefen varnar: Det kan bli måltavla för nya attacker

Source comparison

Location of Axfood warehouse

Sources report different locations for the Axfood warehouse affected by the cyberattack.

gp.se

"the cyberattack impacted Axfood's consumer picking warehouse for home deliveries in Gothenburg."

dn.se

"multiple businesses, including an Axfood consumer picking warehouse in Västra Frölunda, faced similar issues."

Why this matters: One source states the Axfood warehouse is in Gothenburg, while another claims it is in Västra Frölunda. This discrepancy could affect understanding of the geographical impact of the incident.

Latest news

The top news stories in Sweden

Delivered straight to your inbox each morning.