Cyberattacks Push Supermarket Freezers Past Safe Limits Across Europe
Retailers in seven European countries report overnight refrigeration failures echoing a French cyberattack last month, and several firms confirm they were hacked.
Supermarket chains in at least seven European countries reported that refrigerators and freezers in some of their shops heated sharply overnight, reaching as high as 50C (122F), according to The Guardian. Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden reported refrigeration problems on Monday, and several companies confirmed they had been hacked. The Guardian describes the incidents as suspected cyber-attacks.
The Guardian reports that the overnight failures closely resemble a cyber-attack last month that caused millions of euros of damage in France. TechRadar says more than 400 French supermarkets were attacked in October 2026, with freezers pushed to as high as 120F (50C) and hundreds of stores losing food worth millions of euros.
TechRadar names several of the affected retailers in the new wave, including Supervalu in Ireland, Axfood and ICO in Sweden, and large supermarkets in Belgium, Luxembourg and Estonia. It notes that the targets differ from those in France, but says the method appears to be similar.
TechRadar also reports that the US military is investigating similar problems affecting six American bases. The available reporting does not say who is behind the attacks.
Background
Modern grocery stores depend on networked refrigeration. Compressors, condensers and display cases are typically managed by controllers that report to a central building management system or a remote monitoring service. That connectivity lets chains spot faults quickly and adjust settings across many sites at once, but it also links equipment that was once isolated to a building's own wiring with wider networks and the internet. Engineers call this category operational technology, or OT, to distinguish it from the office computers and servers of information technology. OT systems often run for many years, sometimes on software that is hard to update without shutting equipment down, and those gaps can give attackers an opening.
Food safety guidance in many countries generally calls for chilled perishable food to be held at or below about 4C (40F), with frozen food kept at or below -18C (0F). Temperatures far above those levels can allow bacteria to grow in chilled foods and can degrade frozen goods, which is why a cooling failure usually means discarding stock even when it looks fine. A cooling interruption lasting hours can produce a sudden write-off of meat, dairy, prepared meals and other stock.
Cyber incidents affecting physical infrastructure have been a recurring concern for more than a decade. Ransomware groups have disrupted hospitals, fuel distribution and manufacturing, and governments in Europe and North America have repeatedly warned about attacks on industrial controls. Supermarkets sit at the end of long supply chains, so a disruption at the store level can ripple back to distributors, suppliers and producers. Retail has historically received less cybersecurity regulation than banking or energy, though lawmakers have increasingly treated food distribution as part of essential services.
Why it matters
The incidents show how a digital intrusion can produce physical harm at scale. A single compromise repeated across many stores can turn an everyday maintenance system into a source of large-scale food loss. The financial hit from discarded stock falls first on retailers and suppliers, and eventually on shoppers. Food safety is the more serious dimension. People rely on stores to keep food within safe temperature ranges, and a freezer failure can be hard to detect from the sales floor because the contents look normal.
The pattern across several countries also raises questions about shared vendors, shared configurations and remote access arrangements. When similar problems appear in multiple countries within weeks, companies, regulators and security researchers will want to know whether the affected systems share common equipment or software. Those are questions for investigators, and current reporting does not answer them.
The US military's review adds another layer. Military installations use building systems similar to commercial ones, so the exposure may not be limited to retail. For the wider technology community, the episode is a reminder that connected equipment in ordinary buildings deserves the same security attention as laptops and servers.
What to watch
Watch for official findings or statements from the affected retailers about what failed and how systems were restored. Any confirmed attribution would be significant, as would a joint advisory from European or US agencies describing the methods used. Also watch whether more retailers report similar temperature spikes, and whether the US military review produces public details. Food safety regulators may issue guidance on stock that was held outside safe temperatures, and insurers may reassess coverage for cyber-related spoilage. Finally, pay attention to whether refrigeration controller vendors issue security updates or change default remote access settings.
Viewpoints
Commentary from our columns: three angles on this story.
The Builder the engineer's view
Refrigeration controllers were designed to hold a setpoint, not to withstand a determined intruder. That is the gap this story exposes. The practical lesson for anyone running connected building systems is layered defense. Operational technology should sit on its own network segment, separated from corporate email and from anything reachable from the open internet. Remote access should be limited, logged and protected by strong authentication, ideally with hardware keys rather than shared passwords.
Equally important is the safety net beneath the software. A local thermostat or standalone alarm that trips when a freezer passes a set temperature, regardless of what the network says, gives staff a warning even when central monitoring is compromised. Manual override procedures and paper or offline temperature logs matter too, because engineers need a way to see what is happening when dashboards go dark.
None of this is glamorous, and much of it is unfashionable in a sector that has spent years adding connectivity for convenience. But every new sensor and remote setting is another door to check. The engineering question for the next few years is not whether to connect cooling equipment, but how to make sure that a connection cannot silently turn a cold room into a hazard.
The Rulebook privacy, safety and regulation
When a cooling system fails, the first questions are about people. Food that has been held above safe temperatures raises public health concerns that retailers, regulators and customers all have a stake in. Clear communication about which products are affected, and how stores decide what to discard, should be a priority, not an afterthought.
The regulatory picture is also in motion. European cybersecurity rules have expanded in recent years to cover more parts of the food supply chain, and reporting obligations generally require serious incidents to be disclosed within set windows. Whether these incidents meet those thresholds, and how regulators will treat companies that were attacked, are fair questions. Organizations that suffer intrusions should not be treated as wrongdoers simply for being targets, but they should be expected to explain what they knew, when they knew it and what they changed.
Privacy questions may follow as well. Remote monitoring systems often collect operational data that can reveal store opening hours, staffing patterns and supply habits. Chains should be asked how that data is stored and who can access it.
The long-term response will depend on rules that set minimum security standards for connected equipment, not on the goodwill of individual operators. This episode is a useful test of whether those rules are keeping pace with the systems they are meant to govern.
The Ledger the business angle
For grocery retailers, margins are thin and spoilage is expensive. A single overnight failure can wipe out a day's profit at a store, and when it happens across many locations, the losses multiply quickly. Companies will be weighing the cost of discarded stock against the cost of upgrading controllers, adding backup power and hiring security staff.
Insurance is likely to become a more visible part of the conversation. Cyber policies and property policies often draw lines between a hacked system and a mechanical breakdown, and those lines can determine who pays. Insurers may respond by asking for stronger controls before they will cover refrigeration losses, which would turn security investment into a condition of doing business.
Suppliers and distributors also share the exposure. If stores are forced to refuse deliveries or cut orders while systems are checked, the impact travels upstream to producers. Contract terms and business continuity plans will be tested.
Still, the economics favor preparation. Monitoring that catches a fault in minutes rather than hours, and backup systems that keep stock cold during an outage, are inexpensive compared with a warehouse of spoiled product. The companies that treat cooling as a security issue now may find it is also a sound financial decision.