The available sources establish a series of refrigeration-system intrusions causing food spoilage across Europe and a November 5, 2026 joint US warning about ongoing threats to industrial refrigeration and cold-chain monitoring systems. They do not establish who carried out the attacks or verify every detail in the question.
1
5
6
What is established
- US warning and safeguards: CISA, the FBI, HHS, USDA and DOT urged operators to use strong authentication, keep systems updated, identify internet-accessible equipment, remove unnecessary remote access and secure remote access that remains necessary.
1
3
- Targets and technique: Security reporting identified internet-exposed refrigeration-management controllers; attackers remotely changed controls, including switching equipment into defrost mode and pushing temperatures to approximately 50°C.
11
12
15
- Physical consequences: Reports documented spoiled food and warned of equipment damage and fire hazards, showing that these intrusions can have physical—not merely IT—consequences.
6
13
European attacks and healthcare alert
- October 11–12, France: Reporting described attacks on hundreds of supermarkets, including 150–200 Intermarché stores and nearly 100 Coopérative U outlets; estimates of the total varied considerably.
9
10
- November 2 wave: Reuters reported overheating refrigerators and freezers at more than 100 stores, including dozens of Delhaize locations in Belgium and Luxembourg; another report identified refrigeration problems in at least seven additional European countries.
5
12 Subsequent BBC reporting put the geographic reach at at least 10 countries, so the seven-country figure was not a final count.
4
- Blood-storage incident: NPR reported that Health ISAC warned healthcare members to secure their systems following cold-storage cyberattacks, including an incident involving a French blood bank.
8 Insufficient evidence in the supplied excerpts to verify the supplier breach, three affected sites, the reported −30°C-to-110°C setting changes, or the assertion that alarms prevented all blood-product losses.
Attribution and wider response
- Responsibility claims: A supplied social-media report relayed claims by NoName057(16) and Z-Pentest, reportedly made through an AI-generated video; that is not independent proof of responsibility.
53 Insufficient evidence here to substantiate the specific expert objections or the Kremlin’s denial.
- US military incidents: Reuters reported that the Pentagon was treating August freezer failures at US military bases, which spoiled food, as a suspected cyberattack—not a conclusively established hack.
7 The available excerpt does not verify the inspector general’s investigation, Fort Huachuca’s involvement or cooperation between the Army’s Cyber Field Office and French investigators.
- European response: BBC reported EU officials warning of a deliberate attempt to disrupt the food supply chain.
4 The excerpts do not establish the precise ENISA information-sharing appeal, Swedish police reports or Britain’s warning about targeting small businesses.
Details that remain unverified
- I don’t know, from the supplied evidence, whether Meloni made the specified November 6 statement in Verona, or whether any evidence links these intrusions to fake flight bomb threats.
- Insufficient evidence to verify Ahold Delhaize’s projected €250 million sales and €100 million operating-income impacts, retailers’ specific disconnection measures, the reported equipment fires in France, or CISA’s exact statement that every refrigeration-dependent organization could be targeted.
- The verified practical guidance is narrower but clear: eliminate unnecessary internet exposure and remote access, secure essential access, strengthen authentication and update systems.
3