Hackers Are Turning Supermarket Fridges Into Weapons. Stores Across Europe Are Throwing Away Food

A supermarket freezer is not supposed to be something a hacker can use to destroy thousands of euros' worth of food.

But that is exactly what retailers across Europe have been dealing with.

On November 2, supermarket refrigeration systems in several European countries were reportedly manipulated remotely, causing temperatures in fridges and freezers to rise overnight. By the time workers arrived at some stores, frozen and refrigerated products had already been ruined.

In Sweden, one supermarket reported that its freezers had reached 50°C. In Belgium, a butcher estimated that approximately €15,000 worth of meat had been lost after refrigeration units were affected. Other retailers were forced to empty their refrigerators, discard food and begin restoring their cooling systems.

The incident has raised a serious question about the security of technology that most shoppers never think about: how safe are the connected systems controlling the equipment businesses depend on every day?

This was not an isolated technical malfunction. Several retailers confirmed cyber incidents, and the pattern was strikingly similar across different countries.

In Belgium, Carrefour reported refrigeration disruptions at around 15 of its 700 stores. Delhaize, Colruyt and Intermarché also experienced problems. An IKEA store in Mons was affected, while the Belgian butcher group De Laet & Van Haver reported that its refrigeration units had been manipulated.

Sweden was also affected. Grocery chains ICA and Coop reported incidents involving their refrigeration systems. One ICA store in Stockholm described how its freezers had reached 50°C, destroying products that were supposed to remain frozen.

In Ireland, Musgrave, the company behind SuperValu, reported that 13 stores had been affected by a suspected cyber incident. Retailers in Finland, Estonia, Luxembourg and the Netherlands also reported problems. Subsequent reporting identified further affected locations, including Portugal and Germany.

The scale of the disruption is particularly concerning because these were not simply individual refrigerators being switched off. Supermarkets often use centralised or remotely managed control systems to monitor and adjust refrigeration equipment across their stores.

Those systems are designed to make operations easier. Technicians can monitor temperatures, identify problems and adjust settings without physically visiting every location.

But the same connectivity that makes remote management convenient can also create an entry point for attackers when security is inadequate.

To understand how this happened, it helps to look at how modern supermarket refrigeration works.

Large supermarkets have extensive cooling networks. Different units preserve meat, fish, dairy products, frozen foods, drinks and other items at specific temperatures. Rather than requiring employees to inspect every unit manually, electronic controllers and monitoring systems help regulate the equipment.

Some of these systems can be accessed remotely through internet connections. This allows maintenance companies and technicians to manage installations from different locations.

The problem begins when those connections are not properly protected.

If an attacker gains access to a refrigeration controller, they may be able to change its settings. Instead of keeping a freezer at the temperature required to preserve food, someone could remotely increase the temperature or interfere with its normal operation.

That is what makes this incident different from the usual image of a cyberattack.

There was no need to shut down an entire supermarket's computer network to cause serious damage. Manipulating a system responsible for keeping food cold was enough to create a physical and financial problem.

And the damage can happen surprisingly quickly.

Frozen food depends on consistently low temperatures. Meat, fish and dairy products also require proper refrigeration to remain safe for consumption. When cooling systems stop working as intended, retailers have to determine whether products are still safe to sell.

In many cases, discarding affected food is the safer option.

For a supermarket, this creates several problems at once. There is the immediate cost of replacing spoiled products, the expense of repairing or securing equipment, potential disruption to customers and the possibility of losing trust.

A retailer may have shelves full of products in its warehouse, but if the refrigeration system in its stores cannot preserve them, that inventory becomes a liability.

The latest incidents are also connected to an earlier wave of attacks in France.

On October 12, hundreds of French supermarket refrigeration systems were reportedly manipulated in a large-scale cyberattack. Retailers including Carrefour, Intermarché and other major grocery groups were affected. Some refrigeration units reportedly reached temperatures of up to 50°C, while food was discarded and fires were reported.

The October incident prompted investigations and renewed attention to the security of connected refrigeration equipment.

Danish refrigeration technology supplier Danfoss was mentioned in reporting about the French incidents. The company said some affected systems were running outdated firmware and advised customers to keep supported equipment updated.

Cybersecurity researchers at Claroty had also published research in August 2026 identifying vulnerabilities in the Danfoss AK-SM 800A controller. The vulnerabilities included potential authentication bypass and remote code execution issues, with software updates addressing the reported problems.

That does not establish that every affected supermarket in Europe was compromised through the same vulnerability or that every incident involved Danfoss equipment. Different retailers use different systems, and investigators have not established that all the attacks share one origin.

Nevertheless, the repeated incidents have put the security of refrigeration controllers under scrutiny.

By November 3, European retailers were already rushing to strengthen their defences.

Swedish supermarket chain Coop said it was reviewing its network and moving away from some older 4G connections towards 5G and newer modems. It also disconnected affected refrigeration systems from the internet while investigating the incident.

Danfoss urged customers to ensure that refrigeration controllers were not directly accessible through public internet connections, to install security updates and to check whether their equipment remained supported.

Cybersecurity specialists also warned that simply disconnecting equipment does not necessarily fix the underlying problem. It can reduce immediate exposure, but vulnerabilities still need to be addressed.

The identity of the attackers remains unknown. No group has publicly claimed responsibility for the incidents, and investigators have not confirmed a motive.

That uncertainty is important. Some observers have suggested that the attacks could be intended to cause economic disruption rather than steal money, particularly because the reported incidents have not involved clear ransom demands. But that remains speculation, not an established explanation.

What is becoming clearer is the weakness created when ordinary industrial equipment is connected to the internet without adequate protection.

Refrigeration controllers are not the only systems facing this problem.

Factories use connected equipment to control production lines. Hospitals rely on digital systems to manage important operations. Electricity providers use industrial technology to monitor and control parts of their networks. Water treatment facilities also depend on equipment that can be remotely monitored and managed.

These technologies are often grouped under the term operational technology, or OT. Unlike ordinary office computers, operational technology interacts with physical processes and equipment.

A compromised office computer can expose information or interrupt business operations. A compromised industrial controller can potentially change how a machine operates.

That distinction makes cybersecurity especially important.

For years, businesses have adopted connected devices because they improve efficiency, reduce maintenance costs and make operations easier to monitor. But security has not always received the same attention as convenience.

Some equipment remains in operation for many years. Replacing it can be expensive, and businesses may not always know whether older devices are still receiving security updates.

In the supermarket incidents, that gap between technological convenience and security preparedness became very visible.

There is also a lesson for businesses outside Europe, including those in Nigeria.

As Nigerian companies adopt more connected equipment, digital payment systems, remote monitoring and automated infrastructure, cybersecurity must become part of the investment from the beginning.

A business does not need to operate a massive data centre to become a target. Even equipment that appears ordinary can become an entry point into a company's operations if it is connected and poorly protected.

For technology startups, this growing problem creates opportunities. Companies developing industrial cybersecurity tools, network monitoring software, secure remote-access systems and vulnerability detection platforms could find a growing market among businesses that need to protect their equipment.

The incident also highlights why cybersecurity should not be treated as a problem that belongs only to banks, government agencies and technology companies.

A supermarket's refrigeration system may not look like an important piece of digital infrastructure. Yet when it is compromised, the consequences can reach customers, suppliers, employees and food businesses.

The most unsettling part of this story is how ordinary the target was.

These hackers did not need to attack a country's power grid or bring down an entire banking network to cause disruption. They targeted the systems responsible for keeping food cold.

And suddenly, something as basic as opening a supermarket freezer became a reminder of how much of the physical world now depends on connected technology.

The next major cybersecurity incident may not begin with a dramatic warning on a computer screen. It could begin with a machine quietly doing something it was never supposed to do.