Europe Faces Rising Hybrid Threats to Infrastructure and Security

Across Europe, a series of alarming incidents involving cyberattacks, bomb threats, and suspected sabotage have exposed vulnerabilities in critical infrastructure and raised pressing questions about the continent's ability to defend against evolving security challenges.

In recent days, hackers remotely manipulated refrigeration systems in supermarkets across Belgium, Luxembourg, Sweden, and the Netherlands. This forced retailers such as Ahold Delhaize, IKEA, Colruyt Group, and Carrefour to discard spoiled food due to refrigerators being set to dangerously high temperatures reaching up to 50 degrees Celsius (122 degrees Fahrenheit). This disruption followed a similar October cyberattack targeting hundreds of French supermarkets that caused fires and extensive food spoilage, highlighting the fragile state of Europe's food supply infrastructure.

Shortly after, French blood-bank refrigeration systems were targeted, potentially jeopardizing vital medical resources. Meanwhile, a wave of hoax bomb threats caused widespread flight disruptions, including diversions and fighter jet escorts, affecting dozens of passenger flights across the continent. The week ended with bomb threats directed at major European news organizations such as the U.K.'s Sky News and Ireland's RTÉ public broadcaster.

These events unfold amid heightened geopolitical tensions and domestic unrest in parts of Europe, creating an environment where civilian infrastructure may become a more attractive target for hostile actors. Although authorities have yet to identify the perpetrators or link the incidents, experts warn that the repercussions go beyond immediate economic losses and can erode public confidence and overall societal stability.

Sidharth Kaushal, a research fellow at the Royal United Services Institute (RUSI), suggested that if Russia is responsible, these actions might be intended to impose costs on European countries for their continued support of Ukraine. He explained, "I think it's more about cost imposition. Convincing the European political leadership that the costs of a war can come home to them." The Kremlin has denied any involvement, dismissing such claims as baseless.

Cybersecurity specialists point out that many of the supermarket refrigeration attacks required minimal technical skill. Fredrik Blix, a cybersecurity expert at Visente and associate professor at Stockholm University, noted that these systems were often connected directly to the public internet and protected only by default or easily guessed passwords. He warned that such vulnerabilities make it inexpensive and simple to carry out these disruptions and that the publicity could encourage similar copycat attacks.

Blix emphasized that while geopolitical tensions have increased awareness of hybrid warfare threats, many attacks may be opportunistic or carried out by individuals testing system weaknesses for amusement rather than state-sponsored operations. However, Kaushal urged viewing these incidents in the broader context of ongoing suspected sabotage efforts, including damage to undersea cables in the Baltic Sea and threats against European defense officials.

European governments face growing uncertainty regarding security commitments, especially as decades of defense underinvestment have left some countries less prepared for unconventional threats. Hybrid warfare tactics—such as cyberattacks, sabotage, and disinformation campaigns—aim to destabilize targets without triggering open conflict.

Capabilities to withstand such threats vary widely across Europe. Nations like Finland and Sweden maintain robust civilian defense programs rooted in Cold War experiences, while others focus more on economic efficiency than defense readiness. Kaushal observed, "As one goes further west in Europe, the level of preparation, both against hybrid attacks and missile threats, is far less great." He added that each incident contributes to strengthening resilience, citing NATO's increased attention to underwater cables and pipelines after the 2022 Nord Stream incident.

Oana Popescu-Zamfir, a senior research fellow at RUSI specializing in European security, remarked that Europe has been slow to adapt to a security environment where the line between peace and wartime is increasingly blurred. She noted the likelihood of continued hybrid attacks aiming to achieve military goals without traditional warfare. Popescu-Zamfir also highlighted the challenge of attribution, as Russia may employ proxy networks across Europe, complicating direct responsibility.

She pointed out the significant potential damage from attacks on internet-connected systems, such as blood supply refrigeration, stressing both the tangible and psychological impacts on society. While such operations are not overly complex to execute, their consequences can be severe, undermining public trust and feelings of safety.

The recent unrest across parts of Europe, including protests over rising living costs, further complicates the security landscape. Domestic tensions can amplify vulnerabilities, providing openings for foreign adversaries to exploit divisions. Alexander Anderson, president and director of policy at a security organization, noted these internal pressures add to external threats.

Blix stressed that companies can implement basic cybersecurity measures to reduce risks, such as disconnecting industrial control systems from direct internet access and enforcing stronger password policies. However, accountability remains murky, with manufacturers, maintenance firms, and retailers often shifting responsibility. He expressed concern that despite risk assessments and reports, meaningful protective actions remain limited.

As Europe confronts this wave of hybrid threats, the need for coordinated responses that enhance infrastructure security and resilience becomes ever more critical. These incidents underscore the evolving nature of security challenges and the importance of proactive measures to safeguard both civilian infrastructure and public confidence.