Bizarre cyberattack turns supermarket freezers into 122-degree ovens in six countries

Wait 5 sec.

Cyberattacks against supermarket refrigeration systems have disrupted grocery operations across Europe, with hackers remotely manipulating temperature controls and destroying perishable food. The incidents affected dozens of stores across several countries, exposing the risks associated with connecting industrial equipment to remotely accessible digital systems.Refrigerators and freezers reportedly reached temperatures exceeding 120 degrees Fahrenheit during Monday’s attacks. Affected retailers operate across Sweden, Belgium, Ireland, Luxembourg, the Netherlands and Estonia. The incidents also follow a similar wave of attacks against French supermarkets in October.Investigators have yet to identify those responsible. No hacking group has claimed responsibility for either wave of incidents.Major grocery chains affectedSeveral major European grocery retailers experienced disruptions across their store networks. Belgian and Luxembourg grocery groups Ahold Delhaize and Colruyt reported incidents involving their refrigeration infrastructure.Colruyt recorded five affected locations. Belgium also saw disruptions at 15 Carrefour stores, according to Reuters. In Ireland, hackers targeted 13 SuperValu supermarkets.Sweden’s grocery sector experienced similar problems. Seven Coop supermarkets reported refrigeration disruptions. Swedish retailer ICA also suffered an overnight incident affecting a limited number of locations.The attacks extended beyond conventional grocery retailers. Hackers affected at least one IKEA location in Belgium. The Swedish furniture retailer operates food departments across its stores, including restaurants and grocery sections. Refrigeration failures therefore threatened food inventory beyond traditional supermarket operations.An ICA supermarket in Stockholm experienced particularly severe damage. Its freezers reportedly reached 122 degrees Fahrenheit, destroying stored food products. Such temperatures can rapidly compromise frozen inventory and make affected products unsuitable for consumption.Connected refrigeration systemsSome refrigeration units affected during Monday’s incidents used temperature management technology developed by Danish manufacturer Danfoss. The same technology appeared in French supermarkets targeted during October’s cyberattacks.Modern commercial refrigeration systems increasingly depend on electronic controllers. These devices regulate cooling cycles and maintain temperatures across storage areas. Remote management capabilities also allow operators to monitor equipment and adjust settings without physically accessing individual units.However, network connectivity introduces additional cybersecurity risks. Attackers who compromise refrigeration controllers could potentially manipulate operating parameters remotely. Changing temperature settings can compromise entire storage facilities without requiring physical access to supermarket premises.Researchers at cybersecurity firm Claroty previously identified security weaknesses in Danfoss refrigeration controllers. Their August report documented vulnerabilities that could expose connected equipment to cyberattacks. Danfoss subsequently addressed the reported issues through a software update.The connection between the French and European incidents raises questions about whether attackers exploited similar weaknesses. However, investigators have not established whether both campaigns involved the same vulnerabilities or perpetrators.France faced earlier attacksOctober’s incidents affected hundreds of French grocery stores, including Carrefour, Monoprix, Intermarché and Cooperative U. Attackers similarly manipulated refrigeration equipment, causing widespread food spoilage across affected locations.The financial damage extended across multiple retail groups. Intermarché’s parent company, Les Mousquetaires, estimated losses worth several million euros following the incidents.The repeated attacks demonstrate how compromising industrial control equipment can disrupt essential commercial operations. Refrigeration systems play a critical role in preserving perishable inventory throughout supermarket supply chains.Their increasing dependence on connected controllers creates another potential entry point for cybercriminals. The incidents also illustrate how relatively small changes to industrial equipment settings can produce substantial physical and financial consequences.