Second wave of fridge attacks hits over 100 European supermarkets

· Cybersecurity · Belgium · Sweden

Attackers remotely altered settings on internet-exposed refrigeration controllers at supermarkets across Europe overnight into Monday, November 2, in the second such wave in recent weeks following an earlier campaign in France. Stores in Belgium, Sweden, Ireland, Estonia and beyond were affected, with more than 100 European stores hit in total. Perpetrators defrosted fridges and freezers, warming units and causing chilled and frozen stock to spoil; no chain reported more than several dozen affected stores, and some had to discard food or move it to backup refrigeration. Security researchers noted that the same mix of internet connectivity, remote access and weak security practices puts temperature-controlled infrastructure in other critical sectors at risk. It marks a repeat of a disruptive pattern against cold-chain operations.

Why it matters:Attacks that manipulate physical industrial controls via the internet show operational-technology security is now a business-continuity problem for retail and cold-chain operators, not just an IT concern.

Key points

  • Affected countries included Belgium, Sweden, Ireland and Estonia, following an earlier French wave.
  • Attackers changed controller settings rather than deploying ransomware.
  • Some stores had to throw away or relocate chilled and frozen food.

Sources (original reporting)

More stories from this day