Disruption Reaches Food Supplies, Flights and Newsrooms
A series of cyberattacks and bomb threats across Europe last week disrupted civilian services and raised questions about preparedness for unconventional security risks, CNBC reported. On Monday, refrigeration systems at supermarkets in Belgium, Luxembourg, Sweden and the Netherlands were remotely set to temperatures reaching 50 degrees Celsius, or 122 degrees Fahrenheit. Affected retailers included Ahold Delhaize, IKEA, Colruyt Group and Carrefour, with spoiled food requiring disposal.
The incidents followed an October cyberattack on hundreds of French supermarkets that caused fires, overheated refrigerators and spoiled food. French blood-bank refrigeration systems were subsequently targeted in an apparently similar incident. Separately, suspected hoax bomb threats disrupted dozens of European flights, prompting diversions and sometimes fighter escorts. Threats later targeted news organizations, including Britain’s Sky News and Ireland’s RTÉ. Authorities have not established responsibility or connections among the attacks.
Basic Security Weaknesses Enable Physical Damage
Fredrik Blix, a cybersecurity specialist at Visente and associate professor at Stockholm University, told CNBC that the supermarket attacks required little technical expertise. Vulnerable refrigeration controls were accessible through the public internet, and some relied on default passwords or credentials that were easy to guess. Those weaknesses allowed attackers to turn digital access into physical disruption without substantial resources.
Blix warned that publicity could encourage imitators. He said cyberattacks had become more frequent over the past decade as digitalization expanded and vulnerable equipment became easier to reach. Although state involvement remained possible, he considered individuals experimenting with accessible systems more likely in these cases. Heightened geopolitical tensions, he added, have also increased government and media attention to incidents that might represent hybrid warfare.
Attribution Remains Open Amid Wider Sabotage Concerns
Sidharth Kaushal, a research fellow at the Royal United Services Institute, urged consideration of the wider security backdrop. He cited suspected sabotage involving Baltic Sea undersea cables, death threats against European defense executives and a bomb placed on a DHL aircraft in 2024. If Russia were responsible for the recent attacks, he told CNBC, the objective could be to make European leaders feel the domestic costs of supporting Ukraine. Russia did not immediately respond to CNBC’s request for comment.
RUSI senior research fellow Oana Popescu-Zamfir said Russia could use European proxy networks ranging from directly controlled operatives to loosely coordinated groups, complicating attribution to the Kremlin. That assessment does not establish Russian involvement in these incidents. She warned that targeted interference with connected equipment, particularly systems protecting blood reserves, could inflict serious practical damage while undermining public confidence in safety.
Civilian Preparedness Varies Across Europe
The incidents come as European governments face greater uncertainty about U.S. security guarantees following decades of defense underinvestment. Hybrid warfare uses methods including sabotage, cyberattacks and disinformation to destabilize opponents without open military conflict. Kaushal said Finland and Sweden have comparatively developed civilian defense arrangements rooted in their Cold War experience, while much European infrastructure was designed primarily for economic efficiency rather than protection.
Kaushal assessed preparedness farther west as weaker against both hybrid attacks and missile strikes of the kind seen in Ukraine. He nevertheless pointed to NATO’s stronger attention to underwater cables and gas pipelines after the 2022 Nord Stream sabotage as evidence that attacks can drive improvements. Popescu-Zamfir said Europe had adapted too slowly and should expect sustained hybrid pressure, arguing that a strict distinction between peacetime and wartime no longer captures its security environment.
Businesses Face Shared but Unclear Responsibilities
For companies, the refrigeration attacks demonstrate how weak digital safeguards can interrupt operations and destroy inventory. Blix said relatively straightforward cybersecurity measures could reduce exposure, particularly preventing industrial controls and other operational equipment from being directly accessible online without adequate protection. The incidents also show why private-sector security matters to national resilience: everyday commercial systems underpin essential supplies.
Accountability is divided among equipment manufacturers, maintenance contractors and retailers. According to Blix, maintenance providers sometimes enable convenient remote access despite manufacturers’ security guidance, while grocery chains may neglect to enforce supplier cybersecurity standards. He criticized an emphasis on paperwork and risk assessments without sufficient practical action. Strengthening access controls and clarifying responsibility remain central challenges; the supplied reporting identifies no coordinated remedy already implemented across the affected businesses.
Unrest Adds Political and Financial Strain
Domestic unrest is adding pressure. CNBC reported weeks of French protests, riots and strikes complicating fiscal reforms. In Spain, housing demonstrations and parliamentary deadlock prompted Prime Minister Pedro Sanchez to call a Nov. 29 snap election, with far-right Vox expected to gain and his left-leaning government at risk. Germany, Italy, Portugal and Albania have also experienced cost-of-living unrest. Reuters reported that protesters tried to enter a Microsoft data center in Amsterdam on Friday.
Alexander Anderson of the Centre for International Security and Economic Strategy told CNBC that Russian, and potentially Chinese, influence operations could amplify divisions, but warned against treating legitimate grievances as foreign interference. Elevated energy prices, persistent inflation, weak growth and large deficits are meanwhile raising borrowing costs and limiting household support. These pressures form the economic backdrop to Europe’s security challenge, rather than evidence that the attacks caused broader financial-market moves.
Source: CNBC