Single Digital Rules Are Needed to Protect European Infrastructure

On 2 November 2026, a coordinated cyberattack targeted internet-connected cooling systems in supermarkets across Belgium, Sweden, Ireland, Estonia, Finland, and Luxembourg. Temperatures inside refrigeration units rose to 55 °C, ruining large quantities of food. The incidents follow a similar attack in France three weeks earlier, with the European Commission suspecting sabotage.

The breaches highlight how vulnerable industrial Internet of Things devices have become across the continent. New research revealed nearly 13,000 refrigeration controls openly reachable online across 99 countries, with many units running outdated software. Supermarket chains in multiple member states were left struggling to manage identical technical failures.

National authorities and businesses often prefer local discretion over cybersecurity compliance to keep regulatory costs low. Small retailers rightly worry that rigid compliance frameworks could impose heavy financial burdens on routine hardware upgrades.

Yet when hackers strike across six countries simultaneously, national borders offer no protection. Fragmented oversight means a single security flaw in one country can destabilise shared supply chains across the entire single market.

Protecting essential food networks requires common, binding cybersecurity standards for industrial connected devices across all 27 member states. Europe’s digital single market cannot stay secure while basic infrastructure relies on patchworks of national rules.

Drafted with AI, edited by the editor.