Europe’s Cyberwar Comes Home

A New Front in Europe’s Cyberwarfare: Fear, Food and Fragile Systems

A wave of cyberattacks rippled across Europe on Sunday and Monday, disrupting two very different kinds of civilian infrastructure: the emergency warning apps that people in Ukraine and Russia use during wartime, and the refrigeration systems that keep food safe in supermarkets from Ireland to Sweden.

Taken together, the incidents underscored a widening reality of modern cyberconflict: the most disruptive attacks are often not those that steal secrets or shut down banks, but those that manipulate ordinary systems people rely on to decide whether to flee, whether food is safe to buy, or whether official warnings can be trusted at all.

In Ukraine, officials said hackers breached the country’s public emergency-alert app late Sunday and sent false warnings to users in Kyiv, including alerts of radiation danger, a chemical threat, street fighting and incoming missiles. Some of the messages, according to reports, appeared in both Ukrainian and flawed English. The false alarms arrived as Russia’s war against Ukraine continued and as civilians already living under the pressure of regular air-raid warnings were forced to judge in real time whether the latest alert was genuine.

Russia’s Emergencies Ministry said its own mobile warning app was also struck early Monday, with fake alerts pushed to users before the application was briefly taken offline. Russian officials said the broader public-warning system had not been affected, suggesting the compromise was confined to the mobile channel rather than the sirens or other core alert infrastructure.

That distinction matters. In both countries, officials moved quickly to reassure the public that central warning systems remained intact. But cybersecurity specialists have long warned that in wartime, attacks on the “last mile” of communication — the app on a phone, the notification a family sees in the middle of the night — can be enough to sow panic even without disabling the entire network behind it.

False warnings of nuclear radiation or chemical attack are especially potent in Ukraine, where fears of escalation have hovered over the war for years. Unlike a conventional hack intended to steal data, such messages are aimed at human behavior: to provoke flight, confusion and mistrust, and to make every future alert harder to believe.

Retail Systems Turned Against Themselves

At nearly the same time, retailers in several European countries reported a different kind of digital disruption. Supermarkets and other stores in Belgium, Luxembourg, Sweden, Ireland, Estonia and the Netherlands said refrigeration systems had malfunctioned overnight, with some fridges and freezers warming dramatically after settings were apparently altered remotely.

Retail chains including Delhaize, Carrefour, ICA and Coop confirmed disruptions, and some stores were forced to discard spoiled food. The incidents echoed a major attack in France in mid-October, when cyber intruders were reported to have remotely changed refrigeration settings at hundreds of stores, causing millions of euros in losses and, in some cases, fires.

In the latest wave, temperatures in some cooling units reportedly rose high enough to threaten food safety and interrupt normal store operations. Ikea was among the retailers reported to have been affected in the broader disturbance.

These attacks lacked the immediate psychological force of fake wartime emergency alerts. But they illustrated another unsettling feature of Europe’s digital dependence: even mundane back-room systems, when internet-connected, can become pressure points with immediate physical and economic consequences.

A hacked freezer is not simply an IT problem. It can mean destroyed inventory, health risks, closed stores and supply-chain disruptions. In a sector already operating on thin margins and strict food-safety requirements, even a brief overnight intrusion can quickly become expensive.

Beyond Data Breaches

The incidents also pointed to a shift in cyber risk from traditional office networks to what security experts call operational technology — the software and controllers that run physical processes like refrigeration, heating, factory machinery and building systems.

For years, such systems were often treated as secondary concerns, especially in retail environments where cybersecurity investment tended to focus on payment systems or customer data. But the French refrigeration attack last month, followed by this broader cross-border wave, has heightened concern that attackers may be exploiting weaknesses in internet-connected controllers or legacy industrial systems that were never designed with robust security in mind.

Investigators have not publicly identified who was behind the supermarket disruptions, and it remains unclear whether the latest incidents are directly linked to the French case or reflect copycat operations exploiting the same vulnerabilities. Retailers and authorities are also still trying to determine whether the attacks share a common supplier, management platform or technical method.

The same unanswered questions hover over the emergency-app breaches in Ukraine and Russia. There is no public evidence yet that the two incidents were coordinated, nor is it clear whether attackers penetrated deeper administrative systems or simply gained access to app-based distribution tools. What is clear is that mobile warning channels — now central to how governments communicate danger — are vulnerable enough to be weaponized.

Why It Matters Now

The attacks came at a moment when Europe is already grappling with how to protect civilian infrastructure from both sabotage and systemic digital weakness. In Ukraine, where information warfare has long accompanied missile and drone strikes, a false alert about radiation or chemicals can be as destabilizing as a physical attack in its immediate psychological effect. It exploits the exhaustion and uncertainty of a population already conditioned to react quickly to danger.

In the rest of Europe, the refrigeration disruptions offered a reminder that cyberattacks no longer need to target headline-grabbing institutions to have broad public impact. Interfering with temperature controls in supermarkets may seem a lower-order offense than attacking a power grid, but it reaches directly into daily life, affecting what people can buy and what businesses can safely sell.

Both episodes revealed the same underlying vulnerability: trust in invisible systems. Public-warning apps work only if people believe them. Automated cooling systems work only if retailers can assume they are doing what they appear to be doing. Once that confidence is shaken, the damage extends beyond the immediate outage or false message.

For governments and companies across Europe, the challenge is no longer merely restoring systems after an attack. It is preserving public confidence in the digital tools that increasingly mediate safety, commerce and ordinary life.