Supermarket fridge cyberattacks spread to nine European countries

From France to a Europe-wide problem

The earlier French cases involved the compromise of controllers that regulate refrigerators in supermarkets. The new reports concern refrigeration installations more broadly, and the retailers involved have flagged the incidents publicly.

The information available so far does not specify which chains were hit, how many stores were affected, what the attackers did to the equipment, or who is behind the campaign. Nor does it say whether food had to be discarded or whether the cooling systems have been restored.

Why it matters

Refrigeration is a critical part of food retail. Cold-chain equipment is increasingly networked and remotely managed, which makes controllers an attractive target: a disruption can threaten perishable stock and force stores to react quickly. Attacks on such devices also show that cyber risk for retailers extends well beyond checkout systems and customer data.

For retailers and equipment suppliers, the sequence of incidents in France and now across a wide swath of Europe raises pressure to review how refrigeration controllers are connected, who can access them remotely, and how quickly they can be isolated or run manually in an emergency.

Further details from the affected chains and from national cybersecurity authorities are expected to clarify the scale of the incidents and the methods used.