Supermarkets across Europe report sudden overnight temperature spikes in fridges and freezers due to suspected hacks, mirroring recent French cyberattacks

Supermarket refrigeration systems are now demonstrably vulnerable to remote temperature manipulation, risking widespread food spoilage.

Supermarket chains in Sweden, Belgium, and Luxembourg have reported significant temperature spikes in their refrigerators and freezers overnight, raising concerns of a coordinated cyber-attack. This incident follows a similar, large-scale attack in France where hackers remotely manipulated cooling units in up to 700 supermarkets, causing millions of euros in food losses and leading to fires. In the recent European incidents, Swedish chains Coop and ICA, and Dutch retailer Ahold Delhaize (operating in Belgium and Luxembourg), confirmed issues with their refrigeration systems. Technicians were mobilized to disconnect affected units from the grid. The French attack specifically targeted controllers supplied by Danfoss, which had previously issued recommendations for security updates. French authorities have launched a formal investigation into the attack.

The recurring nature of these attacks on interconnected supermarket refrigeration systems highlights a critical vulnerability in the retail sector's supply chain. The use of internet-connected devices for remote maintenance and alerts, while intended for efficiency, has inadvertently created an accessible attack vector. This pattern suggests that cybercriminals are actively identifying and exploiting these vulnerabilities, moving beyond typical data breaches to directly disrupt physical operations and cause significant financial damage through product spoilage.

Companies relying on similar internet-connected operational technology, particularly those with perishable goods or critical temperature controls, must urgently reassess their cybersecurity posture. The potential for widespread disruption across multiple countries indicates a need for standardized security protocols and rapid patching of known vulnerabilities in industrial control systems. Future attacks may expand to other sectors with similar IoT integrations, making proactive defense and incident response planning paramount.