The second European fridge campaign has no attribution, and its numbers are being folded into France’s

The 2 November wave is company-confirmed and small. Carrefour said refrigeration systems were affected at 15 of its more than 700 stores in Belgium, describing the impact as “extremely limited” — a second, unrelated “700” now circulating alongside the French figure. Delhaize reported an “IT incident” affecting several dozen stores, mostly in Belgium with a few in Luxembourg. Thirteen SuperValu stores in Ireland were affected. IKEA confirmed by email that its store in Mons, Belgium had refrigeration and freezer units hit. Stephan Moelans, chief executive of the refrigeration contractor Sabcobel, which manages systems for Delhaize, told Belgian media that attackers switched cooling units into defrost mode. One ICA store in Sjöbo, Sweden posted that “overnight, our refrigerators and freezers were hacked, and the temperature was set to 50 degrees” — a single self-reported store.

CNN noted explicitly that it “remains unclear if the incidents are linked” to the French attack. That gap matters more than the overlap. France has attributed October; nobody has attributed November. If the second wave is formally tied to the first, the sanctions question moves from bilateral to EU-wide. If it is not, a different explanation is available: a Wikipedia entry on the incident reports that the wave-2 refrigeration was supplied by Coolworld, which blamed the vulnerability on “a component supplied by a third-party.” The Files could not reach a primary Coolworld statement and does not print the chain-by-chain breakdown that entry carries. A supply-chain compromise in a shared controller stack is a materially different story from a state sabotage campaign.

Assessment: Watch for the composite number. “700 supermarkets across Europe” already appears in trade coverage; the verified position is 700 French stores in October, plus perhaps a hundred-odd confirmed stores across five or six countries in November, with no established link between them. Two figures to treat as unsourced until someone names a primary: the “at least 15 fires” and the “tens of millions of dollars in damage” now travelling through aggregators. The honest frame is that internet-exposed refrigeration controllers turned out to be trivially reachable across a continent — which is true whether or not the IRGC was ever involved.