A suspected cyber attack has affected refrigeration systems at 13 SuperValu stores across Ireland, forcing the removal of chilled and frozen products and delaying store openings, owner Musgrave confirmed today.
Musgrave said in a statement that the incident was limited to a specific model of refrigeration and that its monitoring systems had alerted it to the problem, triggering an immediate response. As a precaution, chilled and frozen products in the affected stores have been removed from sale; all other products remain available as normal.
The company said customer safety was its first priority and that customers could be confident products on sale had been stored at safe temperatures. Musgrave said its investigations were ongoing. Some stores, including the SuperValu in Bray, Co Wicklow, did not open on time today as staff dealt with the issue. SuperValu says it is working with cybersecurity specialists to resolve the issue and restore normal operations as quickly as possible.
The attack follows similar incidents last month in France, where major chains E Leclerc, Intermarché and Coopérative U reported cyber attacks causing refrigerators to heat up in hundreds of stores, forcing spoiled food to be thrown away. Coopérative U's chief executive described the cyberattack as "unprecedented." Today, Ahold Delhaize said an "IT incident" had affected fridges and freezers in dozens of its supermarkets in Belgium and Luxembourg, and the company is investigating.
A spokesperson for EU Agriculture and Food Commissioner Christophe Hansen said the Commissioner had repeatedly stated that food security is an integral part of security. "The empty shelves in the supermarkets targeted are very telling in that regard," the spokesperson said. "These incidents show that cyberattacks can disrupt services, affect businesses and directly affect citizens' daily lives." The spokesperson said the EU has several tools in place to respond to such incidents and that the Commission would continue to work with Member States to strengthen cybersecurity across the Union, including under the Cyber Resilience Act, the Cyber Solidarity Act and NIS2.
Analysis
Why This Matters
- The attacks target retail refrigeration systems, a critical part of the fresh food supply chain, forcing large-scale wastage and raising concerns about food security.
- The incidents span multiple EU countries, suggesting a coordinated or copycat campaign that could escalate.
- The EU Commission has flagged the issue, indicating potential regulatory or coordinated response efforts.
Background
SuperValu is a major Irish supermarket chain owned by the Musgrave Group. France's largest retailers and Belgium's Ahold Delhaize reported similar attacks in October 2026, targeting refrigeration controls. These attacks disrupt grocery operations directly, affecting fresh produce availability and raising questions about the vulnerability of industrial control systems in the food sector.
Key Perspectives
- Musgrave (SuperValu owner): said the incident is limited to a specific refrigeration model, customer safety is the priority, and products on sale are safe; working with cybersecurity specialists.
- EU Commission spokesperson: called the empty shelves "very telling" and said cyberattacks can disrupt services, affect businesses and citizens' daily lives; the EU has tools under the Cyber Resilience Act, Cyber Solidarity Act and NIS2.
- Coopérative U chief executive: described the French attacks as "unprecedented."
What to Watch
- Whether the attacks spread to more retailers or countries, and whether a common vulnerability or threat actor emerges.
- Any EU-level action or guidance on protecting retail refrigeration and industrial control systems.
- SuperValu's timeline for restoring normal operations and any further disclosures about the attack's origin.
Checked
12 claims in this story checked against 1 source: 10 supported.
Show each claim
- SupportedThe headline says 13 SuperValu stores were hit by a suspected cyber attack.RTÉ News: “13 SuperValu stores hit by suspected cyber attack. Refrigeration systems at thirteen SuperValu stores across Ireland have been affected by a suspected cyber attack”
- SupportedThe summary says fresh produce was thrown away.RTÉ News: “resulting in fresh produce to have to be thrown away.”
- SupportedThe summary says the EU considers food security part of security.RTÉ News: “a spokesperson for EU Agriculture and Food Commissioner Christophe Hanson said that Commissioner Hansen has said multiple times that food security is an integral part of security.”
- SupportedThe summary links the supermarket incidents to France and Belgium.RTÉ News: “Last month major French supermarket chains said they were hit by a cyberattack”
- Partly supportedThe opening says Musgrave confirmed the incident today.RTÉ News: “Musgrave, which owns SuperValu confirmed in a statement that this cyber incident is limited to a specific model of refrigeration.”
- SupportedThe opening says the suspected attack affected refrigeration systems at 13 SuperValu stores across Ireland.RTÉ News: “Refrigeration systems at thirteen SuperValu stores across Ireland have been affected by a suspected cyber attack”
- Partly supportedThe opening says the incident forced removal of chilled and frozen products from sale.RTÉ News: “As a precaution, chilled and frozen products in the affected stores have been removed from sale”
- SupportedThe opening says the incident delayed store openings.RTÉ News: “A number of stores including the SuperValu in Bray Co Wicklow did not open on time today as planned while staff dealt with the issue.”
- SupportedThe story quotes Coopérative U’s chief executive calling the cyberattack “unprecedented.”RTÉ News: “Cooperative U's chief executive described as "unprecedented".”
- SupportedThe story quotes the EU spokesperson saying, “The empty shelves in the supermarkets targeted are very telling in that regard.”RTÉ News: “"The empty shelves in the supermarkets targeted are very telling in that regard. We are aware of these incidents," the spokesperson added.”
- SupportedThe story says Ahold Delhaize described an “IT incident” affecting fridges and freezers in dozens of supermarkets in Belgium and Luxembourg.RTÉ News: “Ahold Delhaize said today that an "IT incident" hit fridges and freezers in dozens of its supermarkets in Belgium and Luxembourg, a spokesperson said.”
- SupportedThe story quotes the spokesperson saying, “These incidents show that cyberattacks can disrupt services, affect businesses and directly affect citizens' daily lives.”RTÉ News: “"These incidents show that cyberattacks can disrupt services, affect businesses and directly affect citizens' daily lives.”
