Cyberattacks on Supermarket Refrigeration Systems Hit 7 European Countries, Force Food Disposal
A new wave of cyberattacks struck supermarket refrigeration systems across Sweden, Ireland, Netherlands, Estonia, Finland, Belgium and Luxembourg on Monday, November 2, 2026, causing unauthorized temperature changes in refrigerators and freezers and forcing retailers to discard spoiled food. The incident follows a similar attack less than a month earlier that hit over 500 stores in France, renewing concerns about the digital vulnerability of Europe's food supply chain. Affected retailers include Carrefour (~15 of 700 Belgian stores), an Ikea unit in Mons, the butcher chain De Laet & Van Haver in Antwerp (temperatures reaching 18°C), Ahold Delhaize, Colruyt Group's Spar stores, Intermarché, Coop and ICA in Sweden (one freezer reached 50°C), Musgrave's SuperValu chain in Ireland, Kesko in Finland, Selver in Estonia, and smaller retailers in the Netherlands. No group has claimed responsibility, and Belgian and EU officials warn attribution may never be determined.
Entenda a falha
A vulnerabilidade
No CVE has been assigned. The articles describe attacks on supermarket refrigeration controls, many of which reportedly use Danfoss temperature-control technology, the same vendor implicated in the earlier French attacks. According to SentinelOne's Tom Hegel, the attackers likely reached exposed control panels. With that access they remotely changed temperatures in refrigerators and freezers. The articles do not name the component, the affected or fixed versions, or whether authentication was needed. Danfoss says it is working with customers on security fixes.
Como funciona
The articles give no technical detail on the mechanism. They only say that attackers reached control panels exposed to the network and used them to reprogram temperature settings remotely, including the system that logs temperature. The result was temperatures far from normal, such as 18°C in a butcher's cold rooms and 50°C in one freezer. Which request, protocol or function was abused is not described.
Por que é vulnerável
The articles do not state a root cause. The only weakness they point to is that control panels were reachable from outside, which let attackers act with minimal forensic traces. What the Danfoss security fixes change is not explained. Any claim about the specific defect would be speculation.
Como foi descoberta
The flaw was not found through research. The attacks themselves exposed the problem: they hit stores in seven European countries on November 2, 2026, less than a month after a similar wave hit over 500 stores in France. No group has claimed responsibility, and Belgium's Centre for Cybersecurity says the culprits may never be identified. No ransom demands were reported, which Hegel says may point to sabotage. Danfoss says it is working with customers on fixes.
Explicação gerada por IA a partir da matéria e dos artigos, em 03/11/2026 12:19.
Detalhes técnicos
Many affected systems reportedly use temperature control technology from Danish manufacturer Danfoss, the same vendor implicated in the earlier French attacks. Danfoss stated it is working with customers to implement security fixes. Researcher Tom Hegel of SentinelOne noted that attackers likely accessed exposed control panels, leaving minimal forensic traces, making it difficult to distinguish between a lone actor and a state-sponsored operation. The absence of ransom demands in these incidents suggests possible sabotage rather than extortion motives.
Remediação
Danfoss is reportedly working with affected customers to implement security patches for the exposed control systems; no further technical remediation details were provided in the article.
Linha do tempo
-
Cyberattacks on Supermarket Refrigeration Systems Hit 7 European Countries, Force Food Disposal
ler a análise desta fonte ocultar
A new wave of cyberattacks struck supermarket refrigeration systems across Sweden, Ireland, Netherlands, Estonia, Finland, Belgium and Luxembourg on Monday, November 2, 2026, causing unauthorized temperature changes in refrigerators and freezers and forcing retailers to discard spoiled food. The incident follows a similar attack less than a month earlier that hit over 500 stores in France, renewing concerns about the digital vulnerability of Europe's food supply chain. Affected retailers include Carrefour (~15 of 700 Belgian stores), an Ikea unit in Mons, the butcher chain De Laet & Van Haver in Antwerp (temperatures reaching 18°C), Ahold Delhaize, Colruyt Group's Spar stores, Intermarché, Coop and ICA in Sweden (one freezer reached 50°C), Musgrave's SuperValu chain in Ireland, Kesko in Finland, Selver in Estonia, and smaller retailers in the Netherlands. No group has claimed responsibility, and Belgian and EU officials warn attribution may never be determined.
Technical Details
Many affected systems reportedly use temperature control technology from Danish manufacturer Danfoss, the same vendor implicated in the earlier French attacks. Danfoss stated it is working with customers to implement security fixes. Researcher Tom Hegel of SentinelOne noted that attackers likely accessed exposed control panels, leaving minimal forensic traces, making it difficult to distinguish between a lone actor and a state-sponsored operation. The absence of ransom demands in these incidents suggests possible sabotage rather than extortion motives.
Remediation
Danfoss is reportedly working with affected customers to implement security patches for the exposed control systems; no further technical remediation details were provided in the article.