Coordinated Attacks Spoil Supermarket Inventory
On November 2, 2026, major supermarket chains across Europe confirmed a new wave of cyberattacks targeting commercial refrigeration systems. Threat actors remotely manipulated temperature controls, causing extensive stocks of frozen and chilled goods to thaw and spoil. The disruption directly affected prominent retail groups, including Belgium's Ahold Delhaize and Colruyt, as well as several Ica Kvantum stores in Sweden.
According to reports cited by TechCrunch and The Verge, attackers remotely switched commercial storage units into 'defrost' mode. Consequently, store managers were forced to destroy all affected merchandise to comply with public health and food safety regulations. Incidents have been confirmed in Belgium, Sweden, Luxembourg, Ireland (via TechCrunch), and Estonia (via The Verge).
Unpatched Danfoss Controllers Identified as the Vector
This wave follows a series of similar incidents that crippled refrigeration networks across hundreds of French supermarkets in October. Cybersecurity researchers pinpointed the vulnerability in internet-connected refrigeration controllers manufactured by Danish engineering firm Danfoss.
Industrial cybersecurity firm Claroty had previously issued an alert in August 2026 detailing remotely exploitable vulnerabilities in these specific controller units. The risk was exacerbated because Danfoss had already phased out security update support for the impacted legacy hardware, leaving existing deployments exposed.
Ongoing Investigations and Broader Threats
Law enforcement and regulatory authorities have not yet officially attributed the campaign to a specific threat actor. Meanwhile, the U.S. Department of Defense is reportedly investigating separate incidents where Iran-linked hackers allegedly targeted freezer infrastructure at select military installations earlier this year, underscoring growing interest among threat groups in disrupting operational technology (OT) and commercial refrigeration.