# Coordinated Cyberattacks Target European Refrigeration Infrastructure and Blood Banks

Hackers remotely manipulate temperature controls across Europe, threatening food supplies and critical medical storage.

- **Source:** [The Hacker News](https://brifing.si/source/f944ec2b-8180-47bc-94de-57085b5a6563)
- **Published:** 2026-11-03
- **Topic:** [technology](https://brifing.si/c/technology)
- **Original article:** <https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html>
- **On Brifing:** https://brifing.si/s/e304b90d-5724-44fb-9e9b-2d764317e62e

## Widespread Refrigeration Sabotage

Cyberattacks have targeted refrigeration systems across seven European nations, including Belgium, Sweden, Ireland, and Estonia. Attackers remotely accessed internet-connected controllers, forcing freezers into defrost mode or raising temperatures to 50°C. This coordinated disruption caused significant food spoilage, forcing supermarkets to discard vast quantities of fresh and frozen inventory.

## Escalating Pattern of Attacks

These incidents follow a similar large-scale breach in France last October, which impacted hundreds of stores. While the initial French attack caused millions of euros in losses, the latest wave suggests a persistent vulnerability in remote management systems. Authorities are currently investigating whether these events are linked to the same actors.

## Critical Infrastructure Vulnerabilities

The attacks exploited known security flaws in refrigeration controllers, specifically those manufactured by Danfoss and Copeland. Many affected units were running outdated firmware or lacked secure internet configurations. Cybersecurity experts emphasize that these systems, often left with default passwords, remain highly susceptible to unauthorized remote manipulation by sophisticated external actors.

## Impact on Major Retailers

Major chains including Delhaize, ICA, Coop, and SuperValu reported disruptions. In Belgium, approximately 40 Delhaize stores were hit, while smaller numbers were affected in other countries. Retailers have scrambled to disconnect systems from the internet to prevent further damage, though some stores were forced to operate without functional refrigeration for days.

## Medical Facilities Targeted

In a concerning escalation, French blood banks were also targeted. Attackers attempted to raise storage temperatures for plasma from -30°C to 110°C. Fortunately, monitoring systems detected the anomaly, allowing staff to secure the samples. No blood products were lost, and healthcare operations remained uninterrupted despite the attempted sabotage of critical medical supplies.

## Technical Mechanism of Breach

The attackers utilized remote access capabilities designed for maintenance contractors. By overriding thermostat settings or extending defrost cycles, they bypassed standard safety protocols. Security agencies like France's CERT-FR have issued alerts regarding specific controller models, warning that end-of-life devices lacking security updates are at extreme risk of being compromised again.

## Economic and Operational Consequences

The financial impact is substantial, with Ahold Delhaize estimating a potential €250 million reduction in quarterly sales due to these disruptions. Beyond direct food loss, companies face operational costs related to system restoration, emergency technician mobilization, and the loss of consumer trust. Many stores remain in a state of limited inventory.

## Response and Mitigation Efforts

Supermarket operators are now prioritizing the transition to secure, isolated network connections. Experts argue that hardware modifications may be necessary, as software updates alone cannot always patch deeply embedded vulnerabilities. Retailers are being urged to audit all internet-facing assets to ensure that temperature controllers cannot be manipulated by external commands.

## Global Context of Threats

These attacks occur amidst a heightened global cybersecurity alert level. While no specific group has claimed responsibility, officials note that AI-enhanced tools are making it easier for bad actors to exploit infrastructure weaknesses. The incidents highlight the fragility of interconnected commercial systems and the increasing risk posed to essential public services.

## Government and Agency Oversight

National cybersecurity agencies in Belgium, Sweden, and the UK are monitoring the situation and coordinating with international partners. In France, the Health Ministry and cybersecurity authorities have launched formal investigations into the blood bank breach. Despite these efforts, officials admit that identifying the perpetrators remains a complex and difficult challenge.

## Broader Infrastructure Security Concerns

The targeting of refrigeration units mirrors similar incidents reported at U.S. military bases earlier this year. These events serve as a stark reminder that mundane industrial equipment is now a primary target for cyber warfare. The ability to destroy stock or medical supplies remotely demonstrates a dangerous new vector for disruption.

## Future Outlook for Infrastructure

As businesses continue to digitize, the reliance on remote monitoring creates permanent security trade-offs. Moving forward, the industry must adopt 'secure-by-design' principles, ensuring that critical hardware cannot accept dangerous instructions regardless of access. Without rigorous hardening of these systems, further attacks on essential supply chains remain a high probability.

## Sources covering this story

- [The Hacker News — European Supermarket Refrigeration Systems Targeted in Remote Cyberattacks](https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html)
- [BBC News — Cyber-Attack Disables Refrigeration Systems Across Seven European Nations](https://www.bbc.co.uk/news/articles/cq1kd1nee80eo?at_medium=RSS&at_campaign=rss)
- [Gizmodo — European Supermarket Refrigeration Systems Targeted by Coordinated Cyberattack](https://gizmodo.com/supermarket-freezers-across-europe-hit-with-another-cyberattack-2000833828)
- [www.theregister.com - Articles (theregister.co.uk) — Hackers Remotely Defrost European Supermarket Refrigeration Systems](https://www.theregister.com/cyber-crime/2026/11/02/frozen-part-ii-hackers-remotely-defrost-produce-in-euro-supermarkets-again/5306924)
- [Business | The Guardian — European Supermarket Refrigeration Systems Targeted by Suspected Cyber-Attacks](https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack)
- [1News — Cyberattack Targets French Blood Bank Refrigeration Systems](https://www.1news.co.nz/2026/11/05/cyberattack-hits-french-blood-bank-but-no-blood-products-compromised/)
- [NOS – Buitenland — French Blood Banks Thwart Cyberattack on Cooling Systems](https://nos.nl/l/2638045)
- [DW – Top Stories — French Blood Banks Targeted by Refrigeration Cyberattack](https://www.dw.com/en/french-blood-banks-targeted-by-refrigerator-cyberattack/a-79857981?maca=en-rss-en-top-1022-rdf)
- [Kyunghyang — French Blood Facilities Targeted by Cyberattacks Raising Temperatures](https://www.khan.co.kr/article/202611042300001/?utm_source=khan_rss&utm_medium=rss&utm_campaign=total_news)
- [TechCrunch — Cyberattacks on European Supermarket Refrigerators Cause Widespread Food Spoilage](https://techcrunch.com/2026/11/02/a-fresh-wave-of-cyberattacks-has-hit-europes-supermarket-refrigerators-destroying-food-across-countries/)
- [TechSpot — Cyberattack on Refrigeration Systems Disrupts European Grocery Supply Chains](https://www.techspot.com/news/114419-refrigerator-cyberattack-spreads-many-european-countries-spoiling-food.html)

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
