Reported Nov 4, 20262h ago
ICA identifies 23 Swedish stores affected by refrigeration attacks
ICA identified 23 Swedish stores affected by the refrigeration attacks. It said the affected refrigeration equipment was connected outside its centrally managed network.
Hackers Alter Refrigeration Settings, Forcing European Stores to Discard FoodReported Nov 3, 202623h ago
Italy holds emergency meeting and reports limited refrigeration attack impact
An emergency meeting at Palazzo Chigi brought together senior government, cybersecurity and intelligence officials to address the refrigeration attacks. The Italian government reported that only a few commercial premises were affected, generally involving obsolete security, internet-exposed interfaces and deficient authentication.
Attacchi contro i frigoriferi: impatto limitato in ItaliaReported Nov 3, 20261d ago
Forescout identifies exposed refrigeration services across 99 countries
Forescout’s Vedere Labs identified 12,976 internet-exposed refrigeration service observations across 99 countries, particularly in Italy and Greece. The exposure finding did not establish that the services had been compromised.
‘A freezer should never accept an instruction to heat to 50°C, no matter who sends it’: More European supermarkets hit by suspected cyber attack | IT ProReported Nov 3, 20261d ago
Portugal’s Mosqueteiros confirms incidents at seven Intermarché stores
Portugal’s Mosqueteiros group confirmed refrigeration incidents at seven Intermarché stores, extending the reported geographic scope of the European supermarket refrigeration disruptions to Portugal.
Over 100 European Stores Hit as Supermarket Fridge Attacks Return - SecurityWeekReported Nov 3, 20261d ago
Kesko reports unusual refrigeration temperatures at Finnish stores
Kesko reported unusual refrigeration temperatures at a few smaller Finnish stores whose equipment was outside its central protections. The cause remained under investigation, and a cyberattack was not confirmed.
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull FoodReported Nov 3, 20261d ago
Refrigeration attacks reach Italy; Coop Radenza confirms compromise
Supermarket refrigeration attacks were reported in Emilia-Romagna, Tuscany and Sicily; Coop Radenza confirmed an attack on its frozen-food display remote-control system, saying an initial assessment indicated no additional damage. Italy’s Agenzia per la Cybersicurezza Nazionale was analyzing the incident and coordinating with retail-sector representatives.
L'attacco ai freezer dei supermercati ha colpito anche l'ItaliaNov 3, 20262d ago
Refrigeration attacks reported in UK as NCSC alerts businesses
Reports on November 3 identified UK food-supply-chain businesses as affected by the refrigeration attacks. UK NCSC chief executive Richard Horne confirmed a couple of UK instances involving exploited vulnerable technology and said potentially affected companies had been alerted.
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe - Infosecurity MagazineReported Nov 2, 20262d ago
Refrigeration attacks reportedly extend to Germany and Romania
Reports identified Germany and Romania as additional countries affected by the supermarket refrigeration attacks, expanding the reported geographic scope. The account did not identify specific affected retailers or locations in either country.
Cyberattaque coordonnée contre les systèmes de réfrigération de supermarchés en Europe | CyberVeilleReported Nov 2, 20262d ago
European Commission announces planned review of supermarket cyber preparedness
Agriculture Commissioner Christophe Hansen said the Commission’s Security College would examine retailers’ contingency plans and incident-response capabilities following the refrigeration cyberattacks. No date had been set for the meeting.
EU Commission to probe supermarket cyberattacks - POLITICOReported Nov 2, 20262d ago
Censys publishes StoreView exposure and firmware analysis
Censys reported just over 1,000 internet-exposed Danfoss StoreView instances globally, with French exposure declining from 1,825 before the October attacks to 220. Using HTTP header timestamps to estimate firmware versions, it assessed that 41% of exposed French instances, 68% of Belgian instances and 58% of Swedish instances ran patched firmware.
European Refrigerator Controller Redux: A new wave of refrigeration attacks - CensysReported Nov 2, 20262d ago
Belgian federal prosecutors open investigation into refrigeration attacks
Belgium’s federal prosecutor’s office opened an investigation into the refrigeration attacks affecting retailers in the country. The Centre for Cybersecurity Belgium also acknowledged awareness of the incident.
European Supermarket Refrigeration Hit by Cyberattack WaveReported Nov 2, 20262d ago
CERT-SE confirms contact with parties affected by refrigeration attacks
Sweden’s CERT-SE, NCSC’s incident response function, confirmed ongoing contact with parties affected by cyberattacks on connected grocery refrigeration and freezer systems. It also offered support and advice to organizations experiencing or suspecting IT incidents.
Cyberangrepp mot uppkopplade frys- och kylsystem - CERT-SEReported Nov 2, 20262d ago
Claroty warns of authentication weaknesses in Danfoss refrigeration controllers
Claroty warned about authentication weaknesses affecting Danfoss AK-SM 800A controllers before the first reported French supermarket refrigeration attacks. The report provides no specific CVE identifier or confirmation that these weaknesses enabled the attacks.
La vague de cyberattaques contre les frigos de supermarchés s'éte ...Reported Nov 2, 20262d ago
Sabcobel links latest refrigeration attacks to vulnerability exploited in France
Sabcobel director Stephan Moelans said attackers exploited the same vulnerability used in the previous month's French refrigeration attacks to remotely activate defrost functions. The report provided no vulnerability identifier or independent confirmation of this link and did not establish whether the attacks were coordinated.
Hackers disrupt refrigeration systems at European supermarketsReported Nov 2, 20262d ago
Colruyt and Ahold Delhaize confirm refrigeration system hacks
Colruyt and Ahold Delhaize confirmed that they experienced hacks amid the supermarket refrigeration disruptions. This changes Colruyt’s previously reported position, when it acknowledged technical problems at five stores without confirming a suspected cyberattack.
A fresh wave of cyberattacks has hit Europe's supermarket refrigerators, destroying food across countries | TechCrunchReported Nov 2, 20262d ago
Ikea Mons and Estonia’s Selver identified as refrigeration attack victims
The Ikea store in Mons, Belgium, was reported affected, while Estonian supermarket chain Selver confirmed that one store was targeted. Selver supplier Kitman Coldtech said attackers set a freezer to 50°C, but rapid intervention limited the actual temperature increase to two or three degrees and prevented product losses.
La cyberattaque des frigos change d’échelle et frappe désormais des supermarchés dans toute l’Europe - NumeramaReported Nov 2, 20262d ago
Additional Belgian retailers report refrigeration attacks
Refrigeration attacks were also reported at Intermarché stores and Shop & Go outlets at Q8 service stations, with around 15 Carrefour stores reportedly affected. Belgian butcher chain De Laet & Van Haver reported appliance temperature increases but said its produce was unaffected and all stores remained open.
Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... againReported Nov 2, 20262d ago
Pentagon investigates suspected refrigeration attacks at U.S. military commissaries
The Pentagon was treating August freezer malfunctions at at least six U.S. military commissaries as a suspected cyberattack; one freezer entered defrost mode and heated its contents overnight. U.S. investigators were coordinating with French counterparts, but no technical link, attack method or responsible actor had been publicly confirmed.
Refrigeration and Freezer Systems Breached at Large Scale - TruesecReported Nov 2, 20262d ago
Danfoss and Copeland disclose that attacked devices were largely unsupported
Following the French refrigeration attacks, Danfoss and Copeland said the affected devices were mainly discontinued products that no longer received security updates. This identified a legacy-device support gap affecting the targeted refrigeration controllers.
Second wave of suspected cyberattacks hits supermarket freezers across Europe | The Record from Recorded Future NewsReported Nov 2, 20262d ago
Refrigeration attacks reportedly reach the Netherlands, Finland and Estonia
Supermarket refrigeration attacks were also reported in the Netherlands, Finland and Estonia, widening the previously reported European victim scope. The report said affected refrigeration systems reached temperatures as high as 50°C, thawing food and forcing its disposal, but did not identify specific stores in the newly named countries.
Nuovi attacchi ai freezer dei supermercati in tutta EuropaReported Nov 2, 20262d ago
Germany’s BSI warns retailers about refrigeration controller attacks
Following the French supermarket attacks, Germany’s Federal Office for Information Security (BSI) warned retailers and operators of small connected installations about similar attacks. BSI President Claudia Plattner cautioned that any country could be affected and that the incidents could inspire copycat attacks.
Kühlschränke in Lebensmittelläden weiterer Länder geknackt | heise onlineReported Nov 2, 20262d ago
Consultant describes credential-based access in French refrigeration attacks
Integrity 360 consultant Emil Olofsson said attackers obtained login credentials for French refrigeration-control systems exposed directly to the internet. He assessed that the attack was technically simple enough for amateurs; no connection to the subsequent incidents in other countries was confirmed.
Another fridge cyberattack hits European supermarkets, this time in Belgium, Luxembourg, Sweden and EstoniaReported Nov 2, 20262d ago
French authorities launch formal investigation into refrigeration attacks
The Paris prosecutor’s office opened a formal investigation into the French supermarket refrigeration attacks, citing damage including food losses and fires. Prime Minister Sébastien Lecornu also instructed France’s national cybersecurity agency, ANSSI, to investigate.
Supermarket freezers across Europe hit by second suspected cyber-attack | Sweden | The GuardianReported Nov 2, 20262d ago
Refrigeration attacks extend to Luxembourg and Ireland as reported impact grows
The suspected refrigeration attacks affected around 40 Delhaize supermarkets across Belgium and Luxembourg and 13 SuperValu shops in Ireland, expanding the previously reported victim scope. Local media reported millions of euros in discarded food, while Belgian and Swedish national cybersecurity agencies said they were monitoring the incident.
Supermarket freezers in Belgium, Sweden and Luxembourg hit by suspected cyber-attackReported Nov 2, 20262d ago
Danfoss confirms limited number of controllers affected in French attacks
Danfoss confirmed to Ritzau that a limited number of its refrigeration control systems were affected by the attacks on French supermarkets.
Dagens it-nyheder: 2. november 2026 - ComputerworldReported Nov 2, 20262d ago
Sabcobel says refrigeration units require physical security modifications
Sabcobel said physical modifications were required to address the vulnerability affecting its refrigeration units. It identified moving units to a secure internet connection as the simplest interim protective measure.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareReported Nov 2, 20262d ago
ICA investigates incidents and clarifies affected stores' network connections
ICA said it was investigating and assisting affected stores, which had connections outside its central network; the reports did not establish a breach of ICA's central systems. Ica Kvantum separately acknowledged the disruption on Facebook and said it was working to restore operations.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareReported Nov 2, 20262d ago
Sabcobel customers secure refrigeration connections after French attacks
Sabcobel said most of its customers moved refrigeration units to a secure internet connection after the French attacks.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareReported Nov 2, 20262d ago
Colruyt reports refrigeration problems at five stores
Colruyt told AFP that five stores experienced technical problems affecting refrigerators, adding another retailer to those reporting disruptions. Intermarché reported similar problems at around 15 stores; neither chain confirmed whether a cyberattack was suspected.
Luxembourg and Belgium: Delhaize supermarkets targeted by cyberattack affecting refrigeration - RTL TodayReported Nov 2, 20262d ago
ICA's Sjöbo store temporarily closes after refrigeration disruption
The ICA store in Sjöbo temporarily closed after reporting refrigeration temperatures around 50°C. At other affected Swedish stores, employees discarded spoiled stock as cooling was restored.
Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C | Cryptika CybersecurityReported Nov 2, 20262d ago
CERT-FR identifies compromised controller families and issues security guidance
CERT-FR confirmed compromises involving Danfoss AK-SM and AK-SC controllers, Copeland xweb devices and Dixell xweb devices in France. It recommended removing public internet exposure, securing remote access, checking controller settings, updating firmware and changing default passwords.
Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C | Cryptika CybersecurityReported Nov 2, 20262d ago
Coop discloses planned system upgrades following refrigeration attacks
Coop said seven stores in central Sweden experienced refrigeration incidents and disclosed that system upgrades had already been scheduled for Wednesday following the earlier attacks in France. Press chief Carlos Cancino expressed hope that the upgrades could be accelerated.
Frysar hackade på Icas och Coops butiker - mat förstördNov 2, 20263d ago
Three UK meat suppliers and Langridge Organic suffer refrigeration attacks
AIMS reported attacks through vulnerable Copeland XWEB controllers at three British meat suppliers, while Langridge Organic reported interrupting remote refrigeration manipulation by physically disconnecting equipment; none reported stock losses. A security notice identified authentication-bypass vulnerabilities in XWEB firmware 1.12.1 and earlier, with updates reportedly available since August.
British businesses caught in Europe-wide supermarket fridge attacks | The Record from Recorded Future NewsNov 2, 20263d ago
Musgrave confirms SuperValu refrigeration incident resolved in Ireland
Musgrave Group said on Monday afternoon that the cyber incident affecting refrigeration systems at 13 SuperValu stores in Ireland had been fully resolved. Chilled and frozen products had been removed from sale as a precaution, and replenishment was well underway.
Supermarket freezers across Europe hit by suspected cyberattack | AP NewsReported Nov 2, 20263d ago
Finland’s Supo says state involvement in refrigeration attacks cannot be ruled out
Finland’s security intelligence service, Supo, said a state actor could not be ruled out in connection with the supermarket refrigeration cyberattacks. The statement did not confirm state involvement or identify a responsible actor.
ICAn ruokakauppoihin kyberiskuja Ruotsissa - Ilta-SanomatReported Nov 2, 20263d ago
Finland’s cybersecurity center confirms attacks on supermarket refrigeration
Finland’s National Cyber Security Center confirmed attacks against stores in Finland, providing official confirmation of the previously reported domestic impact of the refrigeration attacks.
Fresh Hack Attacks Defrost Freezers at European SupermarketsNov 2, 20263d ago
EU condemns repeated supermarket refrigeration cyberattacks
European Agriculture Commissioner Christophe Hansen condemned the repeated attacks as a deliberate attempt to disrupt the food supply chain and undermine consumer confidence. He said food security was not currently threatened, but food waste and repercussions for businesses were real.
Après la série d'incidents affectant des frigos de supermarchés dans sept de ses pays, l'UE dénonce "des cyberattaques répétées extrêmement préoccupantes"Nov 2, 20263d ago
Delhaize branch in Hoeilaart reports €100,000 in spoiled produce
A Delhaize branch in Hoeilaart, Belgium, estimated that the November 2 refrigeration disruption spoiled €100,000 worth of produce. The estimate excluded losses associated with the store’s closure.
European Supermarket Freezers Set to 122°F in Suspected HacksNov 2, 20263d ago
De Laet & Van Haver owner reports €15,000 meat loss and contacts police
Owner Luc De Laet reported that refrigerators at a store south of Antwerp were set as high as 18°C, destroying approximately €15,000 worth of meat. He contacted police but did not know whether an investigation had been opened.
New cyberattack on supermarket fridges sweeps across Europe - Business InsuranceNov 2, 20263d ago
Dutch NCSC issues refrigeration attack advisory and investigates incidents
The Netherlands’ NCSC published an advisory on refrigeration attacks affecting multiple suppliers across Europe, including the Netherlands, and said it was investigating. It urged operators to consult suppliers, update vulnerable systems, restrict internet access, strengthen passwords and monitor for suspicious changes.
In het nieuws: cyberaanvallen op koelinstallaties in Europa | NCSCNov 2, 20263d ago
Danfoss confirms refrigeration manipulation at at least 17 Dutch businesses
Danfoss told NOS that refrigeration installations at at least 17 Dutch businesses were manipulated overnight on November 1–2, including butcher shops, neighborhood food retailers and a frozen-goods storage facility. At the storage facility, attackers changed the temperature setpoint from -20°C to -10°C, but technicians restored control before more serious consequences developed.
Cyberattaque massive en Europe : les pirates sabotent les frigos des supermarchésNov 2, 20263d ago
Kitman Coldtech reports additional Estonian refrigeration attack victims
Kitman Coldtech head Jann Mutso reported that other customers in Estonia, beyond its own client, had also been attacked that morning, although details remained uncertain. He identified the compromised Selver installation as an older Danfoss system; Selver said this was its last store where the new system had not yet been introduced.
Hackers raised freezer temperature at Selver supermarket to +50°C | News | ERRNov 2, 20263d ago
Denmark's SAMSIK warns of refrigeration attacks and checks for domestic impact
SAMSIK warned of reported attacks against European supermarket refrigeration and freezer systems and coordinated with authorities and businesses to determine whether Danish companies were affected, without confirming Danish victims. It urged organizations to check internet exposure, apply security updates, restrict connectivity where feasible and report suspected compromises.
Styrelsen for Samfundssikkerhed følger sagen om cyberangreb mod køle- og frysesystemer i Europa | Styrelsen for SamfundssikkerhedNov 2, 20263d ago
ICA store in Tomelilla closes after refrigeration failure
An ICA store in Tomelilla announced on Facebook that it was closed because its refrigeration and freezer systems had failed. ICA Sjöbo's Rickard Nilsson identified the Tomelilla store as another affected location, although its own statement did not confirm a cyberattack.
Kylar och frysar utslagna i flera ICA-butikerNov 2, 20263d ago
Hemköp and Willys home deliveries disrupted in Gothenburg
Axfood press chief Magnus Törnblom said the refrigeration incident disrupted online grocery home deliveries from Hemköp and Willys in Gothenburg, extending the reported impact beyond ICA and Coop stores in Sweden.
Butikskylar och frysar hackade - flera butiker drabbade | SVT NyheterNov 2, 20263d ago
Swedish ICA and Coop stores suffer refrigeration attacks
Reported cyberattacks disrupted refrigeration overnight into November 2 at several ICA locations and six Coop stores, ruining food stocks. Reported temperatures reached 55°C at ICA Nära in Böda, while other stores reported temperatures around 50°C.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareNov 2, 20263d ago
Sabcobel dispatches technicians and disconnects affected refrigeration installations
Sabcobel began dispatching technicians at 1 a.m. during the November 1–2 refrigeration incidents and disconnected affected installations throughout the night and morning. CEO Stephan Moelans said evaporators had been switched into defrost mode and described the incidents as a cyberattack.
Supermarket Freezer Attacks Reach Belgium, Sweden, LuxembourgReported Nov 2, 20263d ago
U.S. refrigeration incidents reported at over a dozen commissaries across 11 states
The U.S. military was investigating August refrigeration incidents at more than a dozen military commissaries across 11 states. This expands the previously reported scope of at least six affected commissaries.
Fresh Hack Attacks Defrost Freezers at European SupermarketsNov 1, 20264d ago
Belgian supermarket refrigeration attacks begin Sunday night
Attacks reportedly began around midnight Sunday night, affecting at least 20 refrigeration units across Belgium, including stores operated by Delhaize, Carrefour and Spar. Attackers reportedly overrode defrost temperature and duration settings, raising temperatures to approximately 50°C and spoiling food.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareOct 21, 202615d ago
ANSSI links French refrigeration attacks to exposed interfaces and weak passwords
ANSSI director Vincent Strubel told the French Senate that the agency’s assessment pointed to internet-exposed administration interfaces and weak passwords, rather than previously publicized vulnerabilities, as enabling the French refrigeration attacks. The assessment did not establish access methods for the subsequent European incidents or U.S. commissary failures.
Defrost and Disrupt | An Assessment of Europe’s Refrigeration Attacks - Malware Analysis - Malware Analysis, News and IndicatorsOct 13, 202623d ago
Danfoss advises Dutch customers to secure refrigeration systems
Danfoss advised Dutch customers to disconnect refrigeration systems from the internet and reconnect only through a secured network. The company said most stores implemented protective measures after its warning, but a small number did not.
Ook koelsystemen in Nederland aangevallen, bij 17 bedrijven temperatuur aangepastOct 12, 202624d ago
French refrigeration attack affects hundreds of stores across multiple chains
The October 12 refrigeration cyberattack affected at least 300 Intermarché and Netto outlets, 80 Carrefour supermarkets and approximately 30 Monoprix stores in France. Fewer than 100 Coopérative U outlets and several E.Leclerc stores were also affected.
"Vers 3h du matin, la température des congélateurs a augmenté soudainement": en Belgique, des installations frigorifiques de Carrefour, Ikea et Delhaize victimes d'une cyberattaqueOct 2026
Lupovis detects failed login attempts against refrigeration-controller sensors
Lupovis observed unsuccessful authentication attempts against its Danfoss refrigeration-controller sensors from October 20–30, peaking on October 26; many used factory-default credentials. All attempts failed, and no evidence links this activity to either refrigeration attack wave.
European Supermarket Cyberattacks: Hackers Target Freezers - BlackFogOct 2026
SOCRadar identifies approximately 2,900 exposed Danfoss services in France
SOCRadar reported finding approximately 2,900 internet-exposed Danfoss StoreView services in France in an October snapshot. The finding quantified controller exposure but did not establish that these services had been compromised.
Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg - Malware News - Malware Analysis, News and IndicatorsOct 2026
French supermarkets suffer refrigeration controller compromises
Attackers remotely altered refrigeration settings at French supermarkets in October, keeping equipment in defrost mode and destroying refrigerated food. No connection to the subsequent Swedish incidents has been confirmed.
Supermarket freezers across Europe struck in second crippling cyberattack - hackers raise temperatures to 50 degrees Celsius in Belgium and Sweden, destroying food stocks | Tom's HardwareOct 2025
Danfoss announces end of service for legacy refrigeration controllers
Danfoss announced a hard end of service for legacy refrigeration controllers in its October 2025 newsletter, citing European cybersecurity legislation. The company stated that continuing small EDx file updates for the AK-SM 800 would violate legislative requirements.
Supermarket freezers in seven European countries were set to 50°C overnight Monday, three weeks after France. Censys still counted 138 Danfoss StoreView panels online in Belgium : r/sysadmin
