Hackers Hit Connected Supermarket Freezers Across Europe, Forcing Food Write-Offs

The incidents were reported early this week. Stores in Belgium, Sweden, Ireland, Luxembourg, Estonia and Finland reported problems, and further cases were found elsewhere in Europe. In some shops, refrigeration temperatures were reportedly pushed as high as 50°C, which made chilled and frozen goods unsafe to sell. Some retailers had to empty whole refrigerated sections.

Swedish chain ICA said 23 of its stores had been affected, and Carrefour reported disruption at 15 stores in Belgium, according to Reuters. Retailers were working on Tuesday to update vulnerable systems, following a similar incident in France last month.

No One Has Claimed Responsibility

Nobody has publicly claimed the attacks. Investigators have not said whether they were carried out by individual hackers, criminal groups or state-linked actors.

The European cases come as authorities also examine refrigeration failures at US military facilities. Reuters reported on October 29 that the Pentagon was treating freezer malfunctions at military commissaries as suspected cyberattacks. Investigators have not publicly linked those incidents to the attacks on European supermarkets.

National authorities have opened investigations, and the incidents have prompted calls for closer cooperation between European cybersecurity agencies, according to the report.

How Retailers Are Responding

Modern supermarkets increasingly use refrigeration systems that can be monitored and adjusted remotely, which lets operators manage cooling across many sites from one place. That same connectivity creates an opening when controllers are reachable from the public internet or run outdated software.

Danish company Danfoss, whose refrigeration equipment was used in some of the affected stores, has advised customers not to expose controllers directly to the internet and to install available security updates. Retailers and equipment suppliers are reviewing their systems, applying patches and disconnecting vulnerable equipment from the public internet where needed. Swedish retailer Coop is moving affected connections from older 4G links to 5G, Reuters reported.

Security specialists cautioned that taking equipment offline may reduce immediate exposure without fixing the weaknesses underneath.

Why It Matters

Unlike ransomware or data theft, these attacks targeted operational technology, the hardware and software that control physical processes. The damage is measured in spoiled stock, lost sales and gaps on shelves rather than stolen records. For retailers, food distributors and any business that relies on remotely managed equipment, from cold chains to heating systems and building controls, the episode is a reminder that connected devices bought for efficiency need the same security attention as corporate IT. Companies in the Gulf, where cold-chain logistics and large modern retail formats depend heavily on refrigeration, face the same type of exposure.