Cyberattacks Target European Supermarket Refrigeration Systems
Remote hacks on connected cooling units cause widespread food spoilage across European retail chains.
1Widespread Refrigeration System Compromise
A second wave of cyberattacks has targeted supermarket refrigerators across Europe, specifically impacting stores in Belgium, Ireland, Luxembourg, and Sweden. Retail giants Ahold Delhaize and Colruyt confirmed the incidents, which involved hackers remotely altering system settings to trigger defrost cycles. This unauthorized access resulted in significant food spoilage across dozens of retail locations.
2Hardware Vulnerability and Security Gaps
Security researchers identified the source of the breaches as internet-connected refrigerator units manufactured by the Danish company Danfoss. These specific units are no longer receiving critical security updates, leaving them exposed to remote exploitation. The security firm Claroty had previously issued warnings in August regarding the inherent risks and potential for outages.
3Escalation from Previous Incidents
This recent wave follows similar attacks observed in France last month, where hundreds of supermarkets suffered food losses due to deliberate temperature manipulation. The pattern suggests a coordinated effort to exploit outdated, internet-connected infrastructure. These incidents highlight a growing trend where cyber-adversaries target physical operational technology to disrupt essential retail supply chains.
4Real-World Supply Chain Consequences
The attacks demonstrate how digital vulnerabilities translate into tangible physical damage, specifically within the food supply chain. Supermarkets were forced to discard large quantities of inventory that became unsafe for consumption after the defrost cycles were triggered. These events emphasize the critical need for robust cybersecurity protocols in modern, interconnected retail environments.
5Broader Industry Security Context
The retail sector is not the only industry facing such threats; in 2025, a major cyberattack on the food distributor UNFI caused significant shortages across the United States. These events illustrate that food security is increasingly tied to digital resilience. Retailers must now prioritize the security of their operational technology as much as their digital storefronts.
6Military and Infrastructure Concerns
The threat extends beyond commercial retail, as U.S. Department of Defense officials are currently investigating potential hacks of freezer units located on military bases. Authorities are examining links to Iran-backed actors, who have previously been implicated in cyberattacks targeting U.S. water providers. This indicates a shift toward targeting critical infrastructure and logistics.
7Operational Impact on Retailers
For companies like Ahold Delhaize, the financial impact involves both direct inventory loss and the operational burden of securing compromised systems. The reliance on connected devices for temperature monitoring has created a new attack surface that traditional IT security measures may not fully cover. Retailers must now re-evaluate their entire IoT device ecosystem.
8Urgency for Infrastructure Hardening
The repeated success of these attacks underscores a systemic failure to secure legacy internet-connected hardware. As hackers continue to exploit unpatched vulnerabilities, the retail industry faces an urgent need to replace or isolate vulnerable refrigeration units. Future stability depends on implementing stricter security standards for all connected devices within the global food supply chain.