Cyberattacks on European Supermarket Refrigerators Cause Widespread Food Spoilage
Hackers exploit outdated Danfoss refrigerator firmware to trigger defrost cycles across multiple European nations.
1Systemic Refrigeration Security Breach
A second wave of cyberattacks has targeted supermarket refrigeration systems across Belgium, Ireland, Luxembourg, and Sweden. Hackers successfully manipulated temperature settings to initiate defrost cycles, rendering large quantities of food inventory unsafe for consumption. Major retailers like Ahold Delhaize and Colruyt confirmed the incidents, highlighting a critical vulnerability in connected retail infrastructure.
2Vulnerability in Legacy Hardware
Security researchers identified the source of these breaches as internet-connected refrigerator units manufactured by the Danish firm Danfoss. These specific units are no longer receiving essential security updates, leaving them exposed to remote exploitation. Claroty had previously issued a warning in August regarding the inherent risks of remote hacks and outages.
3Escalation from Previous Incidents
These attacks follow a similar pattern observed in France last month, where hundreds of supermarkets suffered significant food spoilage. In that instance, attackers deliberately raised temperatures on connected units to force defrosting. The recurring nature of these events suggests a coordinated effort to exploit the same unpatched firmware across European retail chains.
4Real-World Supply Chain Impact
The incidents demonstrate how digital security failures translate into tangible physical consequences for the global food supply chain. Beyond immediate financial losses for retailers, these attacks disrupt inventory availability and force the disposal of perishable goods. This trend mirrors the 2025 cyberattack on UNFI, which caused widespread shortages and empty grocery shelves.
5Broader Geopolitical Security Concerns
The scope of these attacks has extended beyond commercial retail, drawing attention from defense officials. The U.S. Department of Defense is currently investigating potential compromises of freezer units located on military bases. Authorities are examining whether these breaches are linked to state-sponsored actors, specifically citing concerns regarding Iran-backed hacking groups targeting critical infrastructure.
6Pattern of Infrastructure Targeting
The targeting of refrigeration systems aligns with a broader pattern of cyberattacks against essential utility and supply chain infrastructure. Earlier this year, Iranian hackers were identified as the primary suspects in attacks against U.S. water providers. These events underscore the increasing risk posed by interconnected devices that lack robust, ongoing security maintenance protocols.
7Operational Challenges for Retailers
Retailers are now facing the dual challenge of managing immediate food waste and securing their operational technology environments. The reliance on internet-connected hardware without active vendor support has created a massive attack surface. Companies must now evaluate whether to replace existing hardware or implement network-level isolation to prevent further unauthorized access to systems.
8Urgency for IoT Security Standards
The recent wave of refrigerator hacks serves as a stark reminder of the risks associated with legacy IoT devices. As supply chains become increasingly digitized, the lack of mandatory security updates for industrial hardware poses a systemic threat. Future resilience depends on establishing stricter lifecycle management for connected devices within critical commercial and public sectors.