In multiple regions of France, hackers breached supermarket refrigeration units, causing fresh food inside to spoil overnight. Why do such vulnerabilities exist? What industrial control system security risks does this expose?

Smart refrigeration units with defrost functionality inherently carry network attack risks. Danish company Danfoss has even ceased providing security updates for its connected refrigeration units—hence the current situation. This is not merely a 'security vulnerability'; the problems are openly exposed. On November 2, 2026, Pacific Time, Zack Whittaker published a news report stating: A new wave of cyberattacks targeted supermarket refrigeration units across Europe, resulting in widespread food spoilage. A second wave of cyberattacks is believed to have struck refrigeration units at supermarkets across Europe, raising temperatures and spoiling food at dozens of stores in Belgium, Ireland, Luxembourg, and Sweden. Major supermarket chains Ahold Delhaize and Colruyt confirmed the cyberattacks overnight. According to Reuters, a Belgian company operating the Delhaize system stated that hackers had changed settings to activate defrost mode. Stores suffered severe food losses due to the cyberattack, forcing supermarkets to discard thawed or otherwise inedible goods. Prior to this incident, a similar refrigeration unit hacking event occurred in France last month (Translator’s note: Box TV: “Multiple French refrigerators turned into heating cabinets”), where hackers deliberately raised refrigerator temperatures, causing food spoilage across hundreds of supermarkets.

Supermarkets in eight European countries—including Belgium—were hit by cyberattacks causing refrigeration units to heat up to 50°C. Who launched the attacks? Could this become a new form of cyber warfare? How should it be prevented?

Specific reports and official statements (largely unremarkable, as similar incidents have already occurred at U.S. military bases in August): ・ European Commission (Agriculture Commissioner Christophe Hansen): The weaponisation of food has become a reality; cybersecurity of the food supply chain must be taken seriously. ・ European Union Agency for Cybersecurity (ENISA): Must follow up closely, enhance cross-member-state intelligence sharing, and mandate reporting of legacy IoT devices! ...... ・ French National Cybersecurity Agency (ANSSI): The agency’s director stressed that the root cause lies in fundamental security failures (e.g., systems operating without basic protections + weak passwords)! The perpetrator and motive remain undetermined! ・ Paris Public Prosecutor’s Office: Has opened an investigation, assigned to the Anti-Cybercrime Office! No claim of responsibility or ransom note has been issued; no attribution to state actors is being made at this stage! ...... ・ Belgian Public Prosecutor’s Office: Has formally launched a criminal investigation and begun evidence collection—but has not yet identified the attacker! ・ Belgian legacy supermarket brand (Delhaize): Classifies this as an IT incident—not yet characterised as a cyberattack! Approximately 40 stores affected; refrigerated trucks have been urgently deployed! ・ Belgian refrigeration service provider (Delhaize’s operations & maintenance vendor): Confirms this was a cyberattack (Cyberattack), executed by forcing evaporators into continuous defrost mode! Legacy equipment can only be secured via hardware isolation; software patches alone are ineffective! Networks were disconnected overnight! ・ Carrefour Belgium: Confirms this was a cyberattack specifically targeting refrigeration equipment—but impact is limited to 15 stores and remains under control! ...... ・ Swedish National Cyber Security Centre: Incident appears to be a suspected cyberattack; motive and perpetrator remain unknown; national-level attribution is ruled out based on currently available evidence! ・ Swedish consumer cooperative (Coop Sweden): Confirms it was a cyberattack! Seven stores verified as affected; the situation has been contained and systems isolated! ・ Sweden’s largest retail group (ICA Sweden): Classifies the event as a ‘suspected incident’! Reports abnormal operation in refrigeration systems at a small number of stores!

European Supermarket Refrigeration Systems Hacked, Leading to Food Spoilage

just now

Cyberattacks targeting refrigeration units in European supermarkets have caused widespread food spoilage and financial losses across multiple nations. Security experts attribute the breaches to vulnerabilities in legacy controllers from manufacturers such as Danfoss and Copeland.

apnews

2026-10-13

Copeland, Dixell refrigeration systems also hacked, French cybersecurity agency says

2026-10-14

Cyberattacks Hit European Supermarket Chains, Disrupt Refrigeration Systems

2026-11-04

European Supermarket Refrigeration Systems Hacked, Leading to Food Spoilage

European Supermarket Refrigeration Systems Hacked, Leading to Food Spoilage

FAQ