Category
World

Hackers Raise Supermarket Freezers to 55°C as Cyberattack Spreads Across Seven EU Countries

4 min read
Google logo Prefer U24 Media on Google
Authors
Photo of Roman Kohanets
News Writer
This photograph shows empty refrigerators in a Delhaize supermarket in Boortmeerbeek on November 2, 2026, following an IT incident. (Source: Getty Images)
This photograph shows empty refrigerators in a Delhaize supermarket in Boortmeerbeek on November 2, 2026, following an IT incident. (Source: Getty Images)

Hackers disrupted refrigeration systems across at least seven European Union countries on November 2, remotely manipulating temperatures and forcing some retailers to discard chilled and frozen food, Reuters reported on the same day.

Incidents were registered in Sweden, Finland, Ireland, Belgium, Luxembourg, Estonia, and the Netherlands. More than 100 stores and other businesses across Europe experienced refrigeration problems, with several retailers attributing the disruptions to cyberattacks or unauthorized tampering, according to the outlet.

We bring you stories from the ground. Your support keeps our team in the field.

DONATE NOW

In Sweden, supermarket chain Coop reported disruptions at several stores, while ICA said a limited number of its locations were affected. Anadolu Agency noted that a freezer at an ICA Nära store in Boda, on the island of Öland, reached 55°C, leaving food spoiled. Another ICA supermarket in Sjöbo reported temperatures of 50°C.

Belgian retailers also reported widespread disruptions. Carrefour confirmed refrigeration problems at about 15 of its more than 700 stores, while other affected locations included Delhaize, Spar, and smaller retailers. Ahold Delhaize said an overnight IT incident affected refrigerators and freezers at dozens of stores in Belgium and Luxembourg.

In Ireland, Musgrave Group said refrigeration systems at 13 SuperValu stores were affected, forcing some chilled and frozen products to be removed from sale.

In Finland, public broadcaster Yle reported that Kesko detected temperature problems at several smaller K-food stores. The company said it was investigating the cause and had not ruled out interference through network connections. According to Yle, the affected refrigeration equipment was not covered by the retailer’s centralized security protections.

According to the Associated Press, in Estonia attackers accessed a computer controlling the refrigeration equipment at a Selver supermarket and set the temperature to 50°C. The incident was detected and resolved within minutes, limiting the damage.

The latest wave also reached the Netherlands. NL Times reported, citing equipment supplier Danfoss, that refrigeration and freezer systems at at least 17 businesses were targeted overnight. The affected sites included butcher shops, small neighborhood stores, and a frozen-food storage facility. Major Dutch supermarket chains were not reported affected.

NL Times also added that at least some of the compromised refrigeration systems used remote-control technology supplied by Danish manufacturer Danfoss. Equipment from another manufacturer, Copeland, was also reported affected in Belgium. Danfoss said some systems targeted in the Netherlands remained connected to unsecured networks and were still using default passwords.

Internet-connected refrigeration controllers allow technicians to remotely monitor temperatures, diagnose faults, and adjust equipment. Unauthorized access can allow attackers to change temperature settings or activate extended defrost cycles, potentially spoiling large quantities of temperature-sensitive food.

The November incidents came about three weeks after a similar cyberattack targeted refrigeration systems at hundreds of supermarkets in France. Reuters reported that around 700 stores were affected, with attackers remotely manipulating refrigeration controllers and, in some cases, pushing temperatures above 50°C. The attack caused extensive food losses and fires at some locations.

Cybersecurity outlet The Record concluded that the French attacks affected controllers from multiple manufacturers, including older Danfoss and Copeland systems. Some of the compromised equipment had reached the end of its supported life and no longer received security updates.

No one has publicly claimed responsibility for the latest wave, and authorities have not identified the attackers or established their motive.

Attacks on food supply chains have also featured in Russia's cyber campaign against Ukraine.

In July 2025, the state-backed group UAC-0099 breached a Ukrainian grain logistics company through a phishing email and installed the MythicRatatoskr backdoor to execute commands and extract documents.

The hackers hid their control server inside Yggdrasil, a decentralized network without a central authority, in the first documented case of a state-linked group exploiting it this way. Roughly two months later, Sandworm, a group linked to Russian military intelligence, wiped the company's data using Microsoft's SDelete utility.

See all

Never miss a frontline update

Make UNITED24 Media a preferred source on Google and get our exclusive reporting and military analysis from inside Ukraine.