Hackers Are Targeting Supermarket Fridges Across Europe: Is Your Food Safe?
A new wave of cyberattacks has disrupted refrigeration systems at supermarkets across Europe, forcing retailers to remove chilled and frozen products from sale. Some freezer temperatures reportedly reached 50°C. The incidents raise a bigger question: what happens when hackers can interfere with the physical systems that keep our food safe?
By Immigrants.live Editorial Team
Published: November 2, 2026
Last reviewed: November 2, 2026
A supermarket freezer is no longer just a freezer
Imagine arriving at a supermarket in the morning and finding employees removing hundreds of products from refrigerated shelves.
The freezers are not necessarily broken. The electricity has not necessarily failed. The problem may be somewhere else entirely: a computer system connected to the store's refrigeration equipment has been accessed without authorization.
That is what retailers across several European countries have been reporting.
On November 2, 2026, a new wave of incidents affected supermarket refrigeration and freezer systems in Sweden, Belgium, Luxembourg, Ireland and Estonia. Retailers reported unauthorized interference or IT incidents involving cooling equipment. Some stores had to discard chilled and frozen products after temperatures rose beyond safe operating conditions.
In one Swedish supermarket, staff reported that freezer temperatures had reached 50°C. In Belgium, a butcher estimated that approximately €15,000 worth of meat had been lost after refrigeration temperatures rose to 18°C.
The incidents follow a much larger attack in France in October, when hundreds of supermarkets and other food retailers experienced disruptions after attackers remotely manipulated refrigeration systems.
This is not simply another story about hackers stealing passwords or customer information.
It is an example of a growing cybersecurity problem: digital systems increasingly control physical infrastructure, and compromising those systems can damage things in the real world.
So, could this affect the food you buy?
The answer requires separating three things: what has actually happened, what remains unknown, and how food-safety rules protect consumers.
What happened on November 2, 2026?
Reports emerged across Europe after retailers discovered that refrigeration systems had been interfered with overnight.
The incidents affected several major retail groups, although the scale differed significantly between companies and locations.
Where were supermarkets affected?
Country | Retailers and reported impact |
🇸🇪 Sweden | ICA reported a limited number of affected stores. Coop reported refrigeration problems at several locations. |
🇧🇪 Belgium | Delhaize, Carrefour, Colruyt-operated Spar stores and at least one IKEA location reported incidents. |
🇱🇺 Luxembourg | Some Delhaize stores were affected by refrigeration disruptions. |
🇮🇪 Ireland | 13 SuperValu stores reported problems with refrigeration systems. |
🇪🇪 Estonia | A supermarket refrigeration system was accessed, but the intervention was stopped quickly and reportedly caused no significant damage. |
The Associated Press confirmed reports from five countries. Reuters separately reported that one IKEA store in Belgium was affected and that the incidents involved several major supermarket groups.
The exact total number of affected outlets has not been established in a single consolidated official count. Individual companies reported different figures, and some incidents were described as IT problems while others were explicitly identified as cyberattacks.
The numbers behind the incidents
Several reports illustrate the different scale of disruption:
13 SuperValu stores in Ireland were affected, according to parent company Musgrave Group.
15 Carrefour stores in Belgium reported an impact, out of more than 700 Belgian outlets.
Seven Coop stores in Sweden were reported affected by Reuters.
Five Spar stores in Belgium were reported affected by Colruyt Group.
Several dozen Delhaize stores experienced refrigeration problems, mainly in Belgium and also in Luxembourg.
In Sweden, one ICA store reported that all its freezers had reached 50°C. In Belgium, a butcher said refrigeration equipment had reached 18°C, causing an estimated €15,000 loss of meat.
These figures describe reported incidents, not a complete count of all affected European stores.
Importantly, the impact was not the same everywhere.
In Estonia, the reported intrusion was stopped within minutes and caused no significant damage. In Ireland, Musgrave said the incident had been fully resolved by Monday afternoon and that restocking was underway.
Delhaize also reported that its distribution centres continued operating normally and that deliveries to stores were not disrupted.
This distinction matters: a serious cyber incident at individual stores does not automatically mean that a country's food supply is in danger.
This is not the first time. France experienced a much larger attack in October
The latest incidents are particularly concerning because they follow a similar event in France less than a month earlier.
During the night of October 11–12, 2026, hackers accessed refrigeration control systems used by supermarkets and other food retailers.
The attack affected major retail networks, including Intermarché, Netto, Coopérative U, Carrefour, E.Leclerc and Monoprix.
Le Monde reported that refrigeration systems were manipulated so that defrosting cycles ran for much longer than normal. In one reported example, a cycle that normally lasted around one hour was extended to eight hours.
This delayed the detection of the problem and allowed temperatures to rise.
Some cold-storage areas reached 50°C, and one store reported equipment damage at even higher temperatures.
Retailers had to remove and discard products to avoid breaking the cold chain.
The financial losses were significant. One supermarket owner told Le Monde that his store had lost approximately €21,000 worth of products at purchase cost. The overall losses were expected to reach several million euros, potentially tens of millions.
The Paris prosecutor's office later told Recorded Future News that the October incident involved around 700 victims.
France's national cybersecurity agency, ANSSI, issued a formal security alert on October 12, updated on October 16, warning about compromises involving several types of refrigeration controllers.
The French incident demonstrated that a cyberattack could move beyond data theft and cause direct operational and financial damage.
The November 2 incidents raise the possibility that similar weaknesses could be exploited elsewhere.
However, investigators have not established whether the October and November attacks were carried out by the same people.
How can hackers control a supermarket freezer?
Modern supermarkets depend on more than electrical switches and mechanical thermostats.
Large stores use connected systems to monitor and manage:
Refrigerated display cabinets.
Freezers and cold-storage rooms.
Temperature sensors.
Defrosting schedules.
Building management systems.
Security and alarm equipment.
Remote maintenance connections.
These systems allow technicians and operators to monitor equipment without physically visiting every store.
For example, a refrigeration contractor may be able to check temperatures, receive alerts and adjust equipment remotely.
This saves time and helps stores manage large numbers of refrigerators and freezers.
But it also creates a potential point of entry for attackers.
If a remote management interface is exposed to the internet without adequate security, or if a system uses outdated software or weak access controls, an unauthorized person may be able to interfere with its operation.
The hidden cybersecurity problem: Operational Technology
In cybersecurity, systems that monitor or control physical processes are often described as Operational Technology, or OT.
Traditional IT systems manage information: emails, files, accounts and databases.
Operational Technology controls or monitors equipment in the physical world.
Examples include:
Industrial production lines.
Electricity distribution systems.
Water-treatment facilities.
Building heating and ventilation.
Hospital infrastructure.
Commercial refrigeration.
The difference is important.
If a conventional office computer is compromised, the immediate consequences may involve stolen information or interrupted business operations.
If a refrigeration controller is compromised, the result can be spoiled food, damaged equipment and lost inventory.
The supermarket incidents demonstrate how cyber risks can cross the boundary between the digital and physical worlds.
What did French cybersecurity authorities discover?
The October attack in France prompted an investigation into the systems used to control commercial refrigeration.
The French government's CERT-FR cybersecurity team published a specific alert covering several types of remote controllers:
Danfoss AK-SC series.
Danfoss AK-SM series.
Copeland XWEB.
Dixell XWEB.
The alert documented numerous compromises of refrigeration-system controllers.
It also highlighted a fundamental security problem: exposing a management interface directly to the internet is contrary to recommended security practice.
CERT-FR advised operators to:
Remove direct internet exposure from affected devices.
Restrict remote access to protected networks or secure VPN connections.
Check system configurations, including defrost schedules.
Install available firmware updates.
Change default passwords.
Apply the manufacturer's recommended security settings.
The agency warned that attacks were likely still ongoing against these types of devices and that simply restarting a compromised device would not necessarily solve the underlying vulnerability.
This is an important finding because it shows that the French incident was not simply an inexplicable equipment failure.
There were identifiable cybersecurity weaknesses that could be addressed.
However, it would be inaccurate to assume that every store affected on November 2 was compromised through exactly the same vulnerability or equipment.
The full technical details of the latest wave have not yet been established publicly.
Who is behind the attacks?
At the time of publication, no group had publicly claimed responsibility for the October or November incidents.
Reuters reported that it could not establish who was responsible for the latest attacks or whether they were connected to the French campaign.
Several possible motives have been discussed by cybersecurity experts:
Cybercrime and extortion: Criminals may attack business systems to demand payment or create pressure on companies.
Sabotage: An attacker may aim to cause physical damage, operational disruption or financial losses rather than steal money directly.
Political or geopolitical motives: Infrastructure disruption can be used to create uncertainty, damage confidence or put pressure on institutions and businesses.
But these are possible explanations, not confirmed conclusions about the current attacks.
The Belgian Centre for Cybersecurity said that the identity of the attackers may never be established.
There is no verified public evidence identifying a particular country, government or organization as responsible.
There is also no confirmed evidence that the October and November incidents were carried out by the same attackers.
Attributing a cyberattack to a state or political group requires evidence. Similar methods, timing or geographic spread are not sufficient by themselves.
Could hackers really make food unsafe?
This is the most important question for consumers.
The answer is that temperature control is a fundamental part of food safety.
Many foods, particularly meat, poultry, fish, dairy products, prepared meals and certain chilled products, must be stored under controlled temperature conditions.
If food remains too warm for too long, harmful microorganisms may multiply. Some microorganisms can also produce toxins.
The risks depend on several factors:
The type of food.
Its original storage temperature.
How high the temperature became.
How long the product was exposed.
Whether it was subsequently handled and stored correctly.
This means that a brief technical disruption does not automatically make every product unsafe.
But a prolonged loss of temperature control can create a serious food-safety problem.
What does European law require?
European food hygiene rules place responsibility for food safety on food business operators.
Regulation (EC) No 852/2004 requires food businesses to maintain appropriate temperature conditions and states that the cold chain must not be interrupted, except for limited periods outside temperature control where this does not create a health risk.
The rule applies throughout the food chain, including storage, transport, display and distribution.
In practical terms, supermarkets cannot simply continue selling temperature-sensitive products because the cooling equipment has restarted.
They must assess whether the products remained safe.
Where the cold chain has been compromised and safety cannot be established, affected products must be removed from sale.
This is why stores in the reported incidents discarded chilled and frozen products rather than attempting to sell everything after the equipment was restored.
Does this mean contaminated food is being sold across Europe?
There is no evidence in the reports available on November 2 that these incidents have caused widespread food contamination across Europe.
Several retailers took precautionary action by removing products from affected refrigeration units.
Some stores reported temporary reductions in the range of chilled and frozen goods.
Other stores were able to contain the incident quickly.
Delhaize said its distribution centres were operating normally, with no disruption to deliveries. Musgrave said the incident affecting its SuperValu stores had been resolved and restocking was underway.
These details are important.
A cyberattack that damages food inventory is serious, but it is not the same as evidence that unsafe products have reached consumers.
At the time of publication, the reported incidents do not establish a Europe-wide food shortage or a general reason for shoppers to avoid supermarket chains.
Consumers should follow official product withdrawal and recall notices, rather than assume that every product from an affected retailer is unsafe.
What should shoppers do? A practical food-safety guide
There is no need to panic or stop buying refrigerated products.
However, the incidents are a useful reminder to pay attention to basic food-safety practices.
1. Look at the condition of refrigerated displays
Be cautious if a refrigerated cabinet appears switched off, is unusually warm, has visible water from melted ice or contains products that are clearly thawing.
These observations do not prove that food is unsafe, but they are good reasons not to purchase affected products until staff confirm that the equipment and food are safe.
2. Do not buy visibly thawed frozen products
Frozen food should remain frozen according to its storage instructions.
If products are visibly thawed, packages are leaking or frozen items have become soft, avoid purchasing them and alert store staff.
Do not assume that a product is safe simply because it has been placed back into a freezer.
3. Check store notices and official product recalls
When a retailer identifies a refrigeration incident, it may remove affected stock or publish information about specific products.
Follow the retailer's official announcements and the relevant national food-safety authority.
A product recall or withdrawal notice is more reliable than an unverified social-media post.
4. Keep chilled food cold after purchase
Buy chilled and frozen products near the end of your shopping trip.
Take them home promptly and refrigerate them according to the label instructions.
During warm weather or longer journeys, an insulated shopping bag can help maintain temperature.
5. Do not rely on smell or taste to decide whether food is safe
Food can contain harmful microorganisms without looking, smelling or tasting unusual.
If you have a genuine reason to believe a perishable product was stored at an unsafe temperature, do not taste it to check.
Contact the retailer or your local food-safety authority for advice.
6. Keep the receipt and packaging if you suspect a problem
If you purchased a product from a store that later announced a refrigeration incident, keep the receipt and product information.
Contact the retailer and ask whether the product or batch was included in the affected stock.
7. Take food-safety complaints seriously
If a store appears to be selling products from a visibly malfunctioning refrigeration unit, notify the staff.
If the issue is not addressed, report it to the relevant national food-safety authority.
For food that may have been stored improperly, the correct response is to obtain reliable advice rather than guess.
What if you already bought food from an affected supermarket?
First, do not assume that everything you purchased is unsafe.
The incidents were limited to particular stores and equipment. Even within an affected store, not every food item necessarily passed through a compromised refrigerator or freezer.
The most sensible steps are:
Check the retailer's official communication about affected outlets and products.
Identify whether your purchase came from an affected refrigeration unit or batch.
Follow any product withdrawal or recall instructions.
Keep the product refrigerated or frozen according to its label while seeking clarification.
Do not consume a perishable product if the retailer or food-safety authority says it may have been temperature-abused.
If you develop symptoms after eating food you suspect was unsafe, contact a healthcare professional or local health service. Severe symptoms, dehydration or illness in vulnerable people should be assessed promptly.
Do not wait for an official recall to seek medical advice if you are unwell.
Why this matters beyond supermarkets
The most important lesson is not that refrigerators can be hacked.
It is that modern infrastructure increasingly depends on connected systems that were originally installed to make operations more efficient.
Supermarkets are only one example.
Similar digital controls are used in:
Hospitals and medical storage facilities.
Warehouses and distribution centres.
Food-processing plants.
Pharmaceutical storage.
Commercial heating and cooling.
Water and energy infrastructure.
A vulnerability in a connected system can therefore have consequences far beyond the computer network where it originates.
For food retailers, the challenge is especially complex.
A large supermarket chain may operate hundreds or thousands of locations, use multiple refrigeration suppliers, rely on external maintenance contractors and manage different generations of equipment.
Even if the central corporate network is secure, a poorly protected remote controller at an individual store can create a separate risk.
This is why cybersecurity must cover not just computers and customer databases, but also the systems that control physical operations.
What supermarkets and equipment manufacturers must do next
The incidents raise difficult questions about responsibility.
Who is responsible for keeping refrigeration controllers secure: the supermarket, the equipment manufacturer, the refrigeration contractor or the company managing remote access?
In practice, security is a shared responsibility.
Retailers need to know which devices are connected to their networks, which systems are no longer supported and who can access them remotely.
Equipment manufacturers need to communicate vulnerabilities and provide security updates for supported products.
Maintenance contractors need to secure remote access and avoid leaving management interfaces exposed to the public internet.
Supermarket operators also need reliable backup procedures.
These may include independent temperature alarms, manual verification, clear incident-response plans and the ability to isolate compromised equipment from external networks.
Most importantly, refrigeration and food-safety monitoring should not depend on a single digital control channel.
A cyber incident should be detected before it turns into thousands of euros in spoiled food.
The French government's CERT-FR recommendations show that many of these risks can be reduced through basic but essential measures: secure remote access, updated firmware, protected networks and the removal of outdated equipment.
The bigger question: Can cyberattacks disrupt the food supply chain without touching a single truck?
The supermarket attacks reveal a new dimension of supply-chain risk.
In traditional disruptions, food delivery can be interrupted by strikes, fuel shortages, extreme weather, damaged roads or problems at distribution centres.
The recent incidents demonstrate that digital attacks can also disrupt an important part of the retail chain after food has already reached the store.
The products may be physically present.
The shelves may be stocked.
The delivery trucks may be operating normally.
But if the refrigeration system cannot maintain safe conditions, the products may no longer be suitable for sale.
That is what makes these incidents unusual.
They show that digital resilience is now part of food safety.
The wider European food supply has not been shown to be in crisis as a result of these incidents. But the attacks have exposed a vulnerability that retailers, regulators and equipment manufacturers cannot ignore.
A supermarket can recover from a failed freezer.
The harder problem is preventing someone thousands of miles away from being able to interfere with it again.
Frequently Asked Questions
Were European supermarkets hacked on November 2, 2026?
Retailers in Sweden, Belgium, Luxembourg and Ireland reported refrigeration-related cyber incidents, while an attack on a refrigeration system in Estonia was also reported. The incidents affected several supermarket groups and other retail locations.
Which supermarket chains were affected?
Reported retailers included ICA, Coop, Delhaize, Carrefour, Colruyt-operated Spar stores and SuperValu. Reuters also reported that one IKEA store in Belgium was affected. The number of impacted outlets differed by chain.
Did hackers really raise supermarket freezer temperatures to 50°C?
Yes, some individual stores reported freezer or refrigeration control readings reaching 50°C. However, this was not reported at every affected location. A Belgian butcher reported temperatures reaching 18°C.
Is the latest attack connected to the French supermarket cyberattack in October?
That has not been established. The incidents share similarities, but investigators have not confirmed whether they were carried out by the same attackers.
Who was responsible for the supermarket cyberattacks?
No group had publicly claimed responsibility as of November 2, 2026. The identity and motives of the attackers remain unknown.
Is food from affected supermarkets safe to eat?
There is no evidence of widespread food contamination across Europe. Retailers removed affected chilled and frozen products from sale as a precaution. Consumers should check official retailer notices and product recall information.
Can hackers access refrigerators through the internet?
Modern commercial refrigeration systems often use connected controllers for remote monitoring and maintenance. If remote management systems are exposed or inadequately protected, unauthorized access may become possible. French cybersecurity authorities have specifically warned about internet-exposed refrigeration controllers.
What is Operational Technology (OT)?
Operational Technology refers to systems that monitor or control physical equipment and processes. Examples include industrial machinery, building systems, heating, refrigeration and power infrastructure.
What should I do if I see a supermarket refrigerator that is not working?
Do not purchase products that are visibly thawing or being stored in an apparently malfunctioning unit. Inform store staff and follow any official product withdrawal or recall notices.
Does this mean Europe could face food shortages?
The reported incidents have caused local inventory losses and temporary restrictions in product availability, but they do not establish a Europe-wide food shortage. Some affected retailers reported that their distribution and delivery operations continued normally.
What temperature should food be stored at?
Storage requirements depend on the food and its label. As a general household guideline, the Food Safety Authority of Ireland recommends keeping refrigerators between 0°C and 5°C. Frozen products should be stored according to their specified frozen-storage requirements. Commercial food businesses must comply with applicable food hygiene and temperature-control rules.
Sources and editorial methodology
This article uses reporting and official material available on November 2, 2026. It distinguishes confirmed retailer incidents, official cybersecurity warnings, reported technical details and unresolved questions about attribution.
Latest incidents — November 2, 2026
Reuters — New cyberattack on supermarket fridges sweeps across Europe, November 2, 2026
Associated Press — Supermarket freezers in several European countries hit by apparent cyberattacks, November 2, 2026
Recorded Future News — Second wave of suspected cyberattacks hits supermarket freezers across Europe, November 2, 2026
Earlier French incidents and technical background
Le Monde — A disastrous day for French supermarkets after massive cyberattack targets refrigeration systems, October 13, 2026
CERT-FR / ANSSI — Security incident targeting remote controllers for refrigeration installations, October 12, updated October 16, 2026
The Register — Researchers warned attackers could 'defrost the food' months before French supermarkets got hit, October 15, 2026
Food safety and regulation
European Union — Regulation (EC) No 852/2004 on the hygiene of foodstuffs
Belgian Federal Public Service Health — Five keys to safer food
Food Safety Authority of Ireland — Storing food safely
FoodSafety.gov — Food safety during a power outage
Editorial note: No perpetrator has been identified publicly, and no confirmed link between the October French campaign and the November incidents had been established by the publication date. This article does not attribute the attacks to any country or political organization.
Disclaimer: This article is for general information and public awareness. It is not a food-safety inspection, medical assessment or legal advice. Follow official product recall notices and the instructions of local food-safety authorities.
Komentarze