
Several ICA and Coop stores as well as Axfood's warehouse have been hit by hacker attacks which forced the disposal of goods.
AI-generated summary
Grocery stores and warehouses have been exposed to cyber attacks that affected refrigeration and freezer systems. Similar attacks have previously been reported in France.
A total of 23 ICA stores were affected, eight of which have had to dispose of refrigerated and frozen goods. Coop confirmed on Monday afternoon that seven of their 800 stores were exposed to a cyber attack. Axfood's consumer picking warehouse in Västra Frölunda was also exposed. They had to dispose of goods worth around SEK 3 million, according to press manager Magnus Törnblom.
A similar hacker attack hit stores in France a few weeks ago.
Pontus Johnson, professor at the department of network and system technology at KTH, believes that the incident highlights a vulnerability that extends further than freezer boxes in grocery stores.
Large parts of society are today connected to computers which in turn are connected to the internet – for example cars, financial systems and water supply.
- Hackers could get into the control systems and shut down the electricity supply in an entire country or in parts of a country. Even medical equipment used in operations, even pacemakers and insulin pumps, can be connected to the Internet and exposed.
There are practical benefits to having devices connected to the internet, such as being able to control and control them remotely. At the same time, it means a particular vulnerability to external attacks.
- Food supply is part of our critical infrastructure and it is important that we have good preparedness. The worse the security policy situation is, the more important it is. This is a reminder that we are still very vulnerable to attack digitally.
He points out that, even if you try, it is simply not possible to make yourself invulnerable to that type of attack.
To increase security, it is recommended to change to a strong password and to regularly update the software. If the systems are not configured correctly or built correctly, they can be particularly vulnerable.
- What needs to be done in these contexts is to ensure that the devices are not exposed to the entire internet. For example, you can have a firewall in front, which only lets certain traffic through so that not just anyone can access these devices.
At the moment, it is not known who or who are behind the attacks, or exactly how they happened. No one has claimed responsibility for the attacks, nor are there any known reports that they were preceded by threats or blackmail.
- My guess is that this is opportunistic, this doesn't seem like something you do to make any money. Most cybercriminals are financially motivated and here I don't see that there is any financial motive.
Johnson does not rule out that a state-linked group could be behind it.
- In Russia there is a whole bunch of groups that usually engage in destructive attacks against countries in the West. They are usually called pro-Russian, who are not necessarily part of the Russian state apparatus, but rather as supporters, he says, adding:
- With that can also be teenagers who just want to fool around.
Several stores in Sweden suffered problems with refrigeration and freezer systems after a hacker attack on the night of Monday, including in Moheda and on Öland. ICA in Alvesta managed, possibly thanks to an older freezing system. The reason for the attack is not yet clear.

Swedish Ica and Coop stores have suffered from problems with refrigerators and freezers. According to cyber security expert Emil Olofsson, it is probably a relatively simple hacker attack against Internet-connected control systems from Danfoss.

A number of Swedish Coop and ICA stores are reporting problems with their freezers after suspected hacker attacks, similar to an earlier attack in France linked to security flaws at the supplier Danfoss.

Norrtåg has decided to equip its entire train fleet with Starlink technology to improve internet connectivity. The project includes a comprehensive upgrade of the trains' internal network infrastructure and is expected to be completed in the first half of 2027.
Google subsidiary Tuike Finland is being investigated for suspected environmental crimes in Muhos. The company is accused of carrying out deforestation and drainage without completed environmental impact assessments during the construction of a new data center.

Meta is delaying the launch of its new terms of service that have been criticized for allowing AI training on company sites. The announcement comes after strong protests from media houses, letters to authorities and a legal gesture in Norway.