Cyber-Attack on Refrigeration Systems Disrupts Supermarkets Across Nine European Countries
A cyber-attack targeting internet-connected refrigeration systems has struck supermarkets in at least nine European countries—Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden—causing freezer and fridge temperatures to be remotely set as high as 50°C, destroying food stock. The incident follows a similar October 2026 attack on refrigeration providers Danfoss and Copeland that affected French supermarket chains, suggesting a possible connection or copycat campaign. Affected retailers include SuperValu in Ireland (13 stores precautionarily cleared of stock), ICA Sweden, and an Ikea outlet in Mons, Belgium. The UK has also reported limited exploitation of vulnerable refrigeration technology per the NCSC. No threat actor has claimed responsibility, but EU officials suspect a deliberate, possibly nation-state-linked attempt to disrupt Europe's food supply chain.
Detalhes técnicos
Attackers appear to have gained remote access to internet-connected refrigeration units, reprogramming temperature controls to extreme levels (~50°C/122°F), spoiling chilled and frozen goods. The attack vector has not been confirmed, but the pattern mirrors the Danfoss/Copeland incident from October 2026 affecting the same category of connected industrial refrigeration equipment. Sweden's NCSC and the UK NCSC are coordinating with counterparts across Nordic and European countries to assess scope and exploited vulnerabilities.
Remediação
Affected retailers removed chilled and frozen products from shelves as a precaution. The UK NCSC has alerted potentially affected companies. EU Agriculture and Food Commissioner Christophe Hansen stated the incidents will be discussed at the EU's Security College to review retailers' contingency plans and incident response capabilities.
Linha do tempo
-
Cyber-Attack on Refrigeration Systems Disrupts Supermarkets Across Nine European Countries
ler a análise desta fonte ocultar
A cyber-attack targeting internet-connected refrigeration systems has struck supermarkets in at least nine European countries—Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden—causing freezer and fridge temperatures to be remotely set as high as 50°C, destroying food stock. The incident follows a similar October 2026 attack on refrigeration providers Danfoss and Copeland that affected French supermarket chains, suggesting a possible connection or copycat campaign. Affected retailers include SuperValu in Ireland (13 stores precautionarily cleared of stock), ICA Sweden, and an Ikea outlet in Mons, Belgium. The UK has also reported limited exploitation of vulnerable refrigeration technology per the NCSC. No threat actor has claimed responsibility, but EU officials suspect a deliberate, possibly nation-state-linked attempt to disrupt Europe's food supply chain.
Technical Details
Attackers appear to have gained remote access to internet-connected refrigeration units, reprogramming temperature controls to extreme levels (~50°C/122°F), spoiling chilled and frozen goods. The attack vector has not been confirmed, but the pattern mirrors the Danfoss/Copeland incident from October 2026 affecting the same category of connected industrial refrigeration equipment. Sweden's NCSC and the UK NCSC are coordinating with counterparts across Nordic and European countries to assess scope and exploited vulnerabilities.
Remediation
Affected retailers removed chilled and frozen products from shelves as a precaution. The UK NCSC has alerted potentially affected companies. EU Agriculture and Food Commissioner Christophe Hansen stated the incidents will be discussed at the EU's Security College to review retailers' contingency plans and incident response capabilities.