Cyberattacks have moved beyond the digital perimeter and reached the grocery shelves. In several supermarkets in Sweden, the temperature in refrigerators and freezers rose sharply overnight — and at least one store directly linked the incident to the actions of malicious actors.
The disruption affected the networks of ICA and Coop — the country's two large private retail groups. An ICA representative confirmed that the incident affected a limited number of stores and impacted the operation of refrigeration equipment. Coop reported six affected locations.
One of the stores stated on social media that the temperature of its refrigerators and freezers was set to 50 °C. With such a setting, the equipment does not cool but heats the products. A similar picture was previously observed in France.
The French Precedent and the Vulnerability of Smart Systems
In October, French police reported that malicious actors had gained control over cooling systems in hundreds of supermarkets. The result was spoiled products and fires. Observers at the time pointed to the vulnerability of networked systems — equipment that can be controlled remotely.
For the ordinary shopper, this means a new type of threat. Previously, hackers hunted for data and money; now the blow falls on the physical world. Store refrigerators are controlled remotely, which means an attacker does not even need to enter the sales floor to spoil the goods. The Swedish case showed that the French attack was not a one-off episode.
Cryptalist Analysis: The incident highlights the systemic risk of digitalizing critical infrastructure: connected IoT devices in retail are becoming a vector of attack on the real economy, not just on data. For the market, this is a signal of growing demand for cybersecurity solutions in the industrial and retail segments, as well as a reason to revisit the insurance and operational risks of retail chains. Until regulators develop unified standards for protecting smart equipment, such attacks will recur and scale up.