AnswersPublished25 sources
What We Know About Europe’s Supermarket Refrigeration Cyberattacks
By November 4, reports put the second wave of supermarket refrigeration attacks at more than 100 stores in at least 11 European countries; some systems reportedly reached 50°C. Reported impacts included four German supermarkets and six in Romania, while the UK was also added to the affected country list.
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- By November 4, reports put the second wave of supermarket refrigeration attacks at more than 100 stores in at least 11 European countries; some systems reportedly reached 50°C.
- Reported impacts included four German supermarkets and six in Romania, while the UK was also added to the affected country list.
- The clearest technical concern is refrigeration equipment reachable from the internet: researchers reported about 1,000 exposed Danfoss StoreView systems, though that does not prove every incident used the same weakne...
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What was known as of November 4, 2026, about the cyberattacks that remotely controlled supermarket refrigeration systems in at least 11 Euro. Article summary: As of November 4, 2026, reporting described a second European wave of refrigeration-system cyberattacks that raised temperatures and forced retailers to discard food, with Germany, Romania and the UK newly reported among. Topic tags: general, news, general web. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers
A second wave of cyberattacks on supermarket refrigeration systems disrupted food retail across Europe in early November 2026. By November 4, reports said at least 11 countries had been affected, with some refrigeration temperatures reportedly reaching 50°C and retailers discarding food. The pattern resembled October’s attack on roughly 700 French supermarkets, but the perpetrator and the exact access method remained unknown.10
13
18
What happened, and how large was the impact?
The November incidents were reported overnight into Monday, November 2. Attackers remotely changed refrigeration settings; reports described equipment being switched off or put into defrost mode, causing temperatures to rise.5
9
10 Danfoss said the method was the same as in the earlier French incident, according to reporting published November 3.
5
A November 4 report put the second wave at more than 100 affected stores across at least 11 European countries.14 That is a reported tally, not a single independently verified count. The French incidents on October 11–12 were reported to have affected roughly 700 supermarkets.
13 In both waves, the immediate consequence was spoiled or potentially unsafe chilled and frozen stock that retailers removed or discarded.
8
13
The reported 50°C figure describes temperatures reached in some affected units, not every store or freezer.10 Germany, Romania and the UK were added to the list of affected countries in November 4 reporting; officials and company representatives cited four affected German outlets and six in Romania.
17
18
Retailers and outlet counts: what reports specify
Figures vary by retailer and by what is being counted—affected stores, refrigeration systems, or stores that had to discard food. They should not be treated as a complete or directly comparable tally.
- Belgium and Luxembourg: The BBC reported about 40 affected Delhaize supermarkets across the two countries, without splitting the number by country. Separate reporting said 15 Carrefour shops and five Spar stores in Belgium had refrigeration problems.
- Ireland: Musgrave said refrigeration systems were affected at 13 SuperValu stores.
- Sweden: ICA and Coop reported incidents, as did an IKEA superstore.
2
3 One report counted 23 ICA stores with affected refrigeration; another said six Coop stores had to throw away food. A separate report counted seven Coop stores with affected equipment, a different measure from the number reported as discarding food.
5
- Italy: Italy was included among the affected countries, but the available reporting does not establish a retailer-by-retailer outlet count.
8
18
The exposed technology—and what is not yet established
The attacks targeted refrigeration controls rather than simply disrupting checkout or other ordinary retail IT. Reports described attackers reaching internet-connected devices and changing their settings.6
9 A Censys report cited by Facilities Dive found about 1,000 Danfoss StoreView systems exposed to the internet globally.
6
Danfoss and Copeland equipment were reported among the systems affected in France, and a CERT-FR alert listed Danfoss, Copeland and Dixell controller families and StoreView dashboards in the relevant equipment estate.9
13 That does not establish which model or flaw was involved in each November incident. The available reports do not verify a single exploited vulnerability or show that weak authentication was the entry point in every case.
Coop Sweden said it was moving systems to 5G networks and newer modems instead of 4G, and that refrigeration systems at affected stores had been disconnected from the internet.12 Those are reported steps, not evidence that a move to 5G alone resolves security risks. The reporting available here does not provide enough detail to confirm specific Danfoss recommendations or to show that older 4G connections caused the attacks.
Government response and attribution
The EU described the incidents as a deliberate attempt to disrupt the food supply chain.8 A report also said the European Commission held emergency meetings involving ENISA, Europol and the CyCLONe network.
14 Italy’s government held emergency talks with intelligence chiefs, according to Euronews.
20
Romania’s cyber chief described the activity as “semi-amateurish” and said officials did not suspect a state actor.17 That assessment is not a finding of responsibility. As of November 4, reporting said no group had claimed responsibility and the motive was unknown.
18
21
The available reporting does not establish the specific actions of Belgian prosecutors or Britain’s National Cyber Security Centre, or confirm claims about a documented concern over consumer confidence. Those details should not be inferred from broader official warnings about food-supply disruption.
Is there a confirmed link to U.S. military incidents?
NPR reported on refrigeration incidents at U.S. military bases in August alongside the French and European supermarket attacks.1 That timeline alone does not show that the incidents were connected. The reporting available here does not confirm a link between the U.S. and European cases, or substantiate specific claims about Fort Huachuca, a Pentagon inspector general investigation, or cooperation between the Army’s Cyber Field Office and French law enforcement.
The firmest conclusion is narrower: attackers remotely altered refrigeration settings at retailers in multiple European countries, causing food losses, while internet exposure created a significant security concern. The evidence available by November 4 did not establish who was responsible or whether the separate U.S. incidents shared a cause.
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "What We Know About Europe’s Supermarket Refrigeration Cyberattacks"?
By November 4, reports put the second wave of supermarket refrigeration attacks at more than 100 stores in at least 11 European countries; some systems reportedly reached 50°C.
What are the key points to validate first?
By November 4, reports put the second wave of supermarket refrigeration attacks at more than 100 stores in at least 11 European countries; some systems reportedly reached 50°C. Reported impacts included four German supermarkets and six in Romania, while the UK was also added to the affected country list.
What should I do next in practice?
The clearest technical concern is refrigeration equipment reachable from the internet: researchers reported about 1,000 exposed Danfoss StoreView systems, though that does not prove every incident used the same weakne...