Supermarket Cyberattacks Show Europe Needs Shared Digital Rules

On Monday, supermarket refrigerators across Belgium, Estonia, Finland, Luxembourg, Sweden, and Ireland saw temperatures reach up to 55°C, spoiling food and forcing store closures. The disruption followed a similar attack on French retailers three weeks earlier, leading the European Commission to suspect deliberate sabotage. Research shows the vulnerability is widespread: nearly 13,000 industrial refrigeration controls remain openly accessible online across 99 countries, many running outdated software.

Retailers understandably worry that mandatory cybersecurity rules on commercial hardware will add burdensome compliance costs to basic equipment. Industrial systems are typically designed for operational reliability and energy management, not cyber defence.

Yet when identical software flaws allow attackers to strike food networks across half a dozen member states at once, national borders offer zero protection. Patching hardware in France does nothing to secure identical cooling systems in Belgium or Sweden. Leaving digital standards to 27 separate national authorities creates weak links in the single market that hostiles can easily exploit.

Europe can establish unified security standards for internet-connected industrial equipment across the single market. By enforcing mandatory baseline updates and security requirements, the European Union can secure critical distribution chains before the next wave of sabotage strikes.

Drafted with AI, edited by the editor