Refrigeration Systems Targeted in Coordinated Cyberattacks Across European Supermarkets
A new wave of cyberattacks has compromised supermarket refrigeration systems across Europe, leading to food spoilage and operational disruptions. The attacks exploited vulnerabilities in connected cooling equipment from industrial manufacturers.
TL;DR
- Cyberattacks targeted supermarket refrigeration systems in Belgium, Sweden, Estonia, and other European countries.
- Attackers remotely altered temperature settings, causing food spoilage and forcing some stores to remove products.
- Industrial control systems from manufacturers like Danfoss were reportedly affected, highlighting risks in IoT-enabled infrastructure.
- This second wave follows earlier incidents, suggesting persistent threat activity against critical retail operations.
- Retailers and industrial vendors are urged to audit connected systems and apply security patches immediately.
Overnight into Monday, November 2, supermarkets across multiple European countries experienced a coordinated cyber incident that disrupted their refrigeration systems. Attackers remotely manipulated temperature settings, affecting perishable goods and prompting some locations to discard stock.
The breach impacted chains in Belgium, Sweden, Estonia, and neighboring regions, though no single retailer reported widespread compromise. Security researchers suspect attackers leveraged unpatched vulnerabilities in internet-connected refrigeration controllers manufactured by companies such as Danfoss.
Attack Vector and Impact
- Attackers gained remote access to refrigeration control units, altering temperatures and disabling alerts.
- Some stores had to pull perishable items from shelves due to potential spoilage, resulting in financial losses.
- Affected retailers included major chains but each reported only dozens of impacted locations, indicating a distributed approach.
- Initial reports point to outdated firmware and weak network segmentation as contributing factors.
Broader Implications for Industrial IoT Security
- The attacks highlight growing threats to operational technology (OT) systems used in commercial environments.
- Manufacturers of industrial controls are being called on to improve default security configurations and patch delivery mechanisms.
- Retailers using connected infrastructure should implement network monitoring, regular firmware updates, and zero-trust access policies.
- This second wave suggests attackers are actively scanning for exposed OT assets with known exploits.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.