A second wave of supermarket fridge cyberattacks is suspected across Europe, raising refrigeration temperatures and forcing stores to discard spoiled food. Retailers in Belgium, Ireland, Luxembourg and Sweden reported disruptions on Nov. 2, affecting dozens of locations.
Supermarket groups Ahold Delhaize and Colruyt confirmed incidents, while Swedish retailers ICA and Coop reported similar problems. A Belgian refrigeration company said attackers had remotely activated defrost settings on affected systems, according to Reuters. One Swedish store reported temperatures reaching 50 degrees Celsius (122 degrees Fahrenheit), making refrigerated products unsafe for sale.
Earlier Supermarket Fridge Cyberattacks Exposed Security Risks
The incidents follow October cyberattacks that disrupted refrigeration systems at hundreds of French supermarkets. Hackers reportedly manipulated temperature controls, causing extensive food losses and forcing retailers to discard meat, dairy products and frozen goods.
The earlier attacks involved internet-connected refrigeration controllers, including equipment supplied by Danish manufacturer Danfoss. As The Guardian reported, some older systems lacked ongoing security support. Cybersecurity firm Claroty had warned in August about vulnerabilities affecting Danfoss refrigeration controllers that could expose equipment to remote interference.
These systems allow operators to monitor and adjust cooling temperatures remotely. However, compromised access can let attackers change settings, disrupt refrigeration and damage perishable inventory.
Cyberattacks Threaten Food Storage and Distribution
The incidents demonstrate how attacks on connected equipment can cause physical damage and financial losses. In June 2025, a separate cyberattack on U.S. food distributor United Natural Foods disrupted deliveries, contributing to product shortages at grocery stores.
Similar concerns have emerged at U.S. military facilities. Defense Department officials are investigating suspected attacks on freezer systems at military commissaries, with possible Iranian involvement under examination. No connection to the European incidents has been established.
Authorities have not identified the perpetrators behind the latest European attacks or confirmed whether the incidents were coordinated.
