The attack also hit stores in Spain, Portugal, Poland, Germany, Belgium

Assessment

Félix Aimé of the French security firm Sekoia told Reuters that Spain, Portugal, Poland, Germany and Belgium were also affected, but Reuters reported no supporting detail and no other source or government agency has corroborated cross-border impact. ANSSI said only that it was in contact with other European cybersecurity agencies. The claim rests on a single named analyst's statement without published evidence; treating a five-country spillover as established fact goes well beyond what has been shown, even though the possibility is plausible given the large internet-exposed base of the same controllers across Europe.