Hackers target supermarket refrigeration systems across Europe: how cyberattacks expose ...

Cyberattacks on fridges at supermarkets in eight European countries spoiled food en masse, showing digital strikes can do economic harm without a shot fired.

According to Reuters, hackers interfered with supermarket refrigeration systems on November 2, in the second wave of similar attacks in just three weeks. The incident affected dozens of stores in France. By manipulating temperature controls, attackers disrupted food storage operations and caused significant losses of refrigerated and frozen products.

In Sweden, at least 30 stores operated by Coop and ICA were affected. Seven Coop supermarkets have since resumed operations, but their refrigeration equipment has been disconnected from the internet. The company is accelerating upgrades to modern modems and 5G connectivity. Similar attacks affected an Edeka supermarket in Germany and 15 Carrefour stores in Belgium. Three weeks earlier, 80 Carrefour franchise stores in France had experienced the same type of attack.

The attack exploited a straightforward vulnerability: refrigeration control systems accessible through the internet. Hackers were able to interfere with equipment settings remotely, raising temperatures beyond safe storage levels. Systems supplied by Danish manufacturer Danfoss were among those targeted. The company has advised customers against exposing refrigeration controllers directly to the public internet. Cybersecurity specialists recommend isolating vulnerable devices, installing security updates and reviewing how industrial equipment connects to external networks.

Europe’s decentralized retail infrastructure makes such vulnerabilities particularly difficult to address. Many supermarket chains operate through independent franchisees or cooperative structures, meaning individual stores may use different equipment, network configurations and security standards. All 23 affected ICA stores in Sweden, for example, had equipment connected outside the company’s centrally managed network. This fragmentation complicates efforts to identify and eliminate vulnerabilities across entire retail chains.

The incidents illustrate a key characteristic of modern hybrid threats: disrupting civilian life does not necessarily require attacking power plants, transportation hubs or other traditional infrastructure targets. Compromising poorly protected digital systems can interrupt food distribution, damage businesses and impose substantial recovery costs. As everyday services become increasingly dependent on interconnected technologies, their exposure to cyber disruption grows.

The attacks come amid heightened European concern over Russian hybrid warfare. Russia has used cyber operations, sabotage and information campaigns as instruments of pressure against European countries. Reuters and investigators have not identified those responsible for the supermarket attacks. However, the use of cyberattacks, acts of sabotage, disinformation, economic pressure, and political destabilization — instead of or prior to an overt invasion — fits well into modern hybrid warfare. Their significance lies in demonstrating vulnerabilities that hostile actors could exploit, rather than establishing responsibility for a specific operation.

The European Union Agency for Cybersecurity (ENISA) said the scale of the incidents highlights the need for stronger cross-border cooperation, rapid information sharing and coordinated responses. Britain’s National Cyber Security Centre also reported attempted attacks against smaller meat-processing companies, although their impact was limited. NCSC chief executive Richard Horne warned that aging technologies unable to keep pace with evolving cyber threats could lead to increasingly frequent disruptions.

For European security, the lesson extends well beyond supermarket refrigeration. Resilience against hybrid threats depends not only on protecting military installations, government networks and major infrastructure, but also on securing the digital systems supporting businesses, supply chains and essential everyday services. As Europe’s technological infrastructure becomes more interconnected, vulnerabilities in seemingly ordinary equipment can become risks to wider economic and societal stability.

Based on Reuters reporting, November 3, 2026.