Short answer: Supermarket freezers in Europe were hacked, causing stock to spoil. Retailers should enhance security measures, especially firewalls and VPNs.
TL;DR
- Hackers manipulated freezer temperatures, causing food to spoil.
- Affected countries include Sweden, Belgium, Ireland, Estonia, the Netherlands, and Luxembourg.
- Retailers mobilized technicians to address the issue quickly.
- No group has claimed responsibility for the attacks.
What happened?
This incident involves hackers remotely controlling supermarket freezers in Europe, causing food to spoil. The attacks were reported in several countries, with no clear perpetrator identified. Retailers need to improve their cybersecurity, focusing on firewalls and virtual private networks (VPNs) to prevent such incidents.
- Vulnerability
- A mistake or weakness in software that an attacker can misuse.
Key facts
| Reported by | The Record |
|---|---|
| Date reported | 02 Nov 2026 |
How it works
Hackers remotely control supermarket freezers by exploiting vulnerabilities in the refrigeration system's internet-connected controllers. They raise the temperature, causing food to spoil. This happens because the controllers are not properly secured.
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-02 | Reported by The Record | The Record |
| 2026-11-03 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep systems and network devices updated and follow vendor security notices.
- Make sure an incident response contact and plan exist before an attack happens.
- Ask your service providers which protections they offer, and test them.
How to detect it
Defenders can look for unusual temperature readings in logs, failed attempts to adjust temperatures, and unexpected changes in freezer settings.
What is confirmed
- Reported by The Record
Why it matters
This attack shows the importance of securing internet-connected devices. Vulnerabilities can be exploited, leading to food waste and safety issues. Retailers and manufacturers must prioritize cybersecurity measures.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
Can this attack be detected through logs?
Yes, unusual temperature readings and failed attempts to adjust temperatures in logs can indicate a cyberattack.
How many stores were affected in the recent attack?
More than 50 stores were identified in Belgium, over a dozen in Ireland, Estonia, the Netherlands, and Luxembourg. The exact number is not clear.
Sources
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
