The latest cyberattack targeted Internet-connected refrigerators across much of Europe. Dozens of supermarkets across six European countries - Belgium, Luxembourg, Sweden, Ireland, the Netherlands and Estonia - saw freezers or refrigerators taken over by the attack with some freezers in several shops across Europe reportedly rising to as high as 50°C.
The effect was devastating with thousands of tonnes of food effectively being destroyed. Across Europe shop workers have been seen emptying fridges and freezers and discarding mountains of food [BBC].
The attack appears to be similar to one that occurred in early October in which freezer units' evaporators were switched to defrost mode causing them to warm up.
That attack saw at least 100 Coopérative U supermarkets targeted while 180 stores from Intermarché and its Netto brand were also affected. Other major food retailers including Carrefour, Monoprix and E.Leclerc were also hit by the cyberattack, which targeted software provided by the Danish engineering firm Danfoss [BBC].
Stephan Moelans, the CEO of Sabcobel, which operates the supermarket Delhaize's systems, told the Belga news agency that the incident was a cyberattack and that the company had been "working all night and morning to disconnect the affected units from the network". Since the French attack in October, he said the company had been working to "protect our customers' fridges against this vulnerability". However, Moelans told reporters that the units needed physical modifications, not just software updates.
The cyberattack is disquieting given it comes on the heels of government advice to stock up on key essentials.
The UK government last month launched an initiative to inform citizens to stockpile tinned food and water, enough for at least three days. Advice also stretched to suggesting the purchase of a torch and wind-up radio which resulted in many retailers selling out of such devices [BBC].
The latest cyberattack has prompted Britain’s security chiefs to issue an alert to retailers, according to the Daily Telegraph.
The National Cyber Security Centre [NCSC], part of the GCHQ spy agency, said it was working with retailers to guard against the digital threat following attacks that have caused widespread damage.
While no British supermarkets have been targeted thus far, there are concerns that major chains including Tesco and Sainsbury’s, which rely on similar equipment, could be hit.
In recent years there has been a growing reliance on Internet connected devices. Once dubbed the Internet of things, connected devices were supposed to offer better control and organisation for both individuals and companies.
Many people have become reliant on Internet-connected services, from streaming entertainment to doorbell monitoring, home security and controlling lights and heating remotely. Companies too have used such systems to automatically place orders, monitor and control temperature in critical storage facilities as well as enhance security.
However, experts have long warned that Internet-connected devices ranging from domestic appliances to industrial machines are vulnerable to cyberattacks.
With the advent of AI [Artificial Intelligence], breaching such systems has become easier. Only last week two critical, decade-old remote code execution (RCE) vulnerabilities in PHP, which affect roughly 70% of the internet, were exposed. The vulnerabilities were identified with the help of AI. However, the information of their existence was released before a patch was issued. This resulted in many sites, including many government platforms, being forced to go dark as a precaution.
The PHP incident has "demonstrated how quickly AI is changing our cybersecurity landscape", Australian Council on AI Strategy CEO Anna-Maria Arabia told the BBC, as "what used to take months, to expose a vulnerability, is now taking days".
While the PHP incident has been largely forgotten, it demonstrates the ongoing and growing risk to the Internet’s infrastructure.
The recent fridge attacks in Europe are not isolated. In August this year refrigerators on US military facilities went down and are now being labeled a cyberattack by the Pentagon [Reuters].
While concern exists that the recent spate of attacks could be state-sponsored, there is also the possibility they are the work of individuals with no particular agenda.
Hackers have previously sabotaged fridges and freezers both in the United States and elsewhere. Danfoss has said that in 2022 hackers either targeted or broke into supermarkets in Russia and Israel that were using obsolete versions of its cold storage controllers. And in December 2025, federal prosecutors in Los Angeles accused a Ukrainian woman of being part of a hacker group that knocked out the refrigeration at a meatpacking facility in 2024, ruining more than 1,000 Kg of meat. And as far back as 2018 there are instances of the Internet of things exposing risks after a casino was hacked through an Internet-connected fish tank thermometer [Hacker News].
Whether malicious individuals or state-sponsored attacks the effect is the same. Short term food shortages, increased costs for suppliers and ultimately the consumer, and growing concerns over infrastructural cohesion.
Coming within hours of a believed Russian hack on Ukraine’s Emergency Alert System which sent out messages warning of an imminent nuclear, radiological or biological attack, there is good reason to be concerned [BBC].
tvnewswatch, London, UK

