More European supermarkets are getting their freezers hacked

• Supermarkets in Belgium, Sweden, Luxembourg and Estonia reported sudden temperature changes in freezers.
• The incidents are being treated as suspected cyberattacks on refrigeration controls.
• Authorities and retailers are investigating the cause and potential impact on food safety.

Retail chains across four European nations experienced abrupt shifts in freezer and fridge temperatures, prompting fears of a coordinated cyber intrusion. The anomalies threatened product integrity, forced temporary closures, and raised questions about the security of industrial control systems that manage perishable goods. In practice, the refrigeration units rely on a network of sensors, valves and compressors that are orchestrated by programmable logic controllers; when those controllers are manipulated, the entire temperature‑regulation loop can be thrown off balance within moments.

What triggered the temperature anomalies?

Local reports shared by Bloomberg and Reuters indicate that the temperature spikes occurred without any mechanical failure. Store managers described the changes as sudden, with some freezers dropping to unsafe levels within minutes. The pattern matches known tactics where attackers gain remote access to programmable logic controllers (PLCs) that regulate cooling units. By altering set points, a malicious actor can cause rapid temperature drift, forcing staff to discard stock or halt sales. The way this works is that the PLC receives a command—often via a compromised remote‑desktop session or a malicious script—that tells it to open the valve controlling refrigerant flow or to shut down a compressor, thereby allowing the internal temperature to climb or fall far beyond the safe range.

One Ica Kvantum outlet in Sweden posted a brief notice on its Facebook page, confirming that its freezers had been affected and that the store was working with technical teams to restore normal operation. The post did not name a specific hacker group, but the language aligns with previous incidents where ransomware gangs target operational technology (OT) environments. Employees at the store would have been instructed to monitor temperature logs closely, isolate the compromised equipment from the rest of the network, and initiate manual overrides to bring the units back into compliance while forensic data is collected.

Why the incidents matter for the grocery sector?

Freezer and fridge systems are critical to maintaining food safety standards. A temperature breach can render meat, dairy and frozen goods unsafe for consumption, leading to waste and potential health risks. Retailers must quickly isolate affected units, conduct temperature logs, and possibly recall products, all of which generate cost and reputational damage. The immediate response typically involves checking the integrity of the cold‑chain sensors, verifying that the recorded temperatures match the actual conditions, and documenting any deviations for regulatory review.

Beyond immediate losses, the events expose a broader vulnerability in the supply chain. Supermarket chains rely on interconnected networks that link inventory management, point‑of‑sale systems and climate control. A breach in one component can cascade, disrupting logistics and inventory accuracy. The incidents therefore highlight the need for dedicated OT security measures, separate from traditional IT defenses. For example, segmenting the control‑system network from the corporate Wi‑Fi, enforcing multi‑factor authentication for any remote access, and regularly updating firmware on PLCs are all practical steps that can limit the attack surface.

How are regulators and industry groups responding?

While no regulator has issued a formal statement, the pattern of attacks is prompting discussions among European food safety authorities. They are likely to assess whether existing hygiene inspections should incorporate cyber risk assessments for temperature‑controlled storage. Industry groups are also urging members to audit their control systems, apply firmware updates and segment networks to limit remote access. In addition, some agencies may begin to require documented incident‑response plans that specifically address OT breaches, ensuring that supermarkets can demonstrate a structured approach to mitigating any future disruptions.

Retailers are reportedly collaborating with cybersecurity firms to trace the intrusion vector. In similar cases, investigators have found that attackers exploit default passwords or unsecured remote‑desktop protocols to reach PLCs. Strengthening authentication, deploying intrusion‑detection sensors on OT networks and conducting regular penetration testing are being recommended as immediate steps. These measures not only help to identify suspicious activity early but also provide a forensic trail that can be used to attribute the attack and improve defenses over time.

The next weeks will reveal whether the temperature disruptions were isolated incidents or part of a larger campaign targeting European supermarkets. If investigators can pinpoint the method of entry, regulators may introduce mandatory OT security standards for food retailers. Until then, supermarkets will need to balance rapid remediation with maintaining consumer confidence in the safety of their chilled products. Observers should watch for announcements from national food‑safety agencies, updates from industry consortiums on best‑practice guidelines, and any public disclosures from the affected chains about the steps they are taking to harden their refrigeration control infrastructure.

Source: The Verge.