More than a hundred shops across several European countries found their refrigeration running hot on Monday. Days later, two things remain true at once: no group has claimed the attacks, and no investigator has publicly named anyone. It is also not clear why supermarkets were chosen.
That has not stopped the political language from hardening. The EU’s Agriculture and Food Commissioner, Christophe Hansen, called the incidents “a deliberate attempt to disrupt” the bloc’s food supply, and said consumer confidence was being targeted alongside the stock. He also said plainly that “food security is not currently at risk”.
Both halves of that matter. One says this was aimed; the other says it has not yet achieved anything beyond waste and inconvenience.
Who is actually investigating
Belgium’s prosecutors opened a criminal investigation on Monday, the day the attacks landed. Italy’s government arranged a cybersecurity meeting with its intelligence services for the following day. Those are the formal processes under way, and neither has produced a name.
What the experts will say about motive
Awais Rashid, a cybersecurity professor at the University of Bristol, puts the likely motive simply: disruption. Not theft, not extortion, not data. Nothing has been reported taken, and no ransom demand has surfaced. On the evidence so far, the point of the exercise was that it happened.
That is an unsatisfying answer, and it is worth sitting with rather than replacing. Disruption as an end in itself is the hardest kind of attack to attribute, because the usual trail — where did the money go, who received the data — does not exist.
What is being placed next to this story
A great deal of surrounding material is being reported in the same breath as these attacks. It is worth being exact about what is and is not connected.
European intelligence officials have warned that Russia is escalating a “shadow war” on the continent, with cyber-attacks among the methods. That warning is real. It has not been linked to the refrigeration attacks by anyone investigating them.
North Korea was accused last week of the $6.3bn Binance cryptocurrency theft. That is a separate case, with its own attribution, and no one has joined the two.
Britain’s National Cyber Security Centre has said that by 2028 Russia, China and other states will likely use AI-enabled cyber-attacks routinely for geopolitical ends. That is a forecast about the end of the decade, not a finding about this week. On the contrary, officials have pointed at long-standing, well-known weaknesses as the way in here — which is the opposite of a novel technique.
The American footnote
One strand genuinely does connect, and it predates Europe’s supermarkets. In August, freezers at an Army base market in Fort Huachuca, Arizona went into defrost mode, and the naval station at Newport, Rhode Island reported a refrigeration failure. Reuters, citing four officials, reported that the Pentagon treats those malfunctions as a suspected hack, and that American investigators have been in contact with French authorities.
That is the only thread so far that ties the European incidents to anything outside Europe, and it ties them to military commissaries rather than to a flag.
Why the gap matters
Attribution is not a formality. It decides whether this is treated as crime, as sabotage, or as an act of a state — and those three answers lead to three different responses, from a prosecutor’s office to a foreign ministry. Until someone can make that call, the only honest description is the one the investigators are using: a coordinated attack, on a known weakness, by persons unknown, for reasons nobody has stated.
