Skip to main content

full timeline

European supermarket refrigeration cyberattacks

Factlen Newsroom· Updated

Follow European supermarket refrigeration cyberattacks in the Factlen app and get an alert when there is news. Get the app

Illustration: Supermarkets across nine European countries were forced to empty their refrigeration units after hackers remotely triggered continuous defrost cycles.From: Supermarket Cyberattack Expands to Nine European Countries, Spoiling Millions in Food

Share this story

Latest

By 04:54 UTC on November 3, the cyberattacks on supermarket refrigeration systems had expanded to nine European countries. Hackers remotely triggered continuous defrost cycles in internet-exposed legacy refrigeration controllers.

Major grocery chains, including Carrefour and SuperValu, were forced to discard millions in spoiled food as a result of the November 3 breaches. EU officials condemned the sabotage as a deliberate strike on the food supply chain, while no group has claimed responsibility for the intrusions.

How the story developed

The sabotage campaign began on October 14, when a coordinated cyberattack targeted internet-connected temperature controllers at hundreds of grocery chains in France. By 04:26 UTC, it was reported that the intrusion exploited basic network vulnerabilities, specifically targeting operational technology that lacked proper segmentation from the public internet.

During the initial October 14 breach, attackers altered temperature setpoints, pushing cooling units to 50 degrees Celsius. This caused minor electrical fires as the hardware strained and resulted in tens of millions of euros in damages.

Illustration: The attackers exploited internet-exposed legacy controllers, bypassing weak default passwords to manipulate temperature settings.From: Supermarket Cyberattack Expands to Nine European Countries, Spoiling Millions in Food ·

Following the October 14 incident, cybersecurity agencies urged retailers to immediately sever direct web access for all environmental control units to prevent further physical damage.

The localized attacks in France escalated into a transnational network intrusion on November 2. By 21:21 UTC, hackers had breached the internet-connected refrigeration controllers of supermarket chains across six European countries.

Illustration: Retailers were forced to discard millions of euros worth of ruined inventory before morning staff could intervene.From: Supermarket Cyberattack Expands to Nine European Countries, Spoiling Millions in Food ·

During the November 2 expansion, malicious actors disabled safety protocols to spike commercial freezer temperatures. This forced freezers to defrost and destroyed massive quantities of food across the affected nations. In response, cybersecurity experts advised retailers to physically disconnect their temperature management systems from external networks.

Charts, maps and images

Major retail chains across the Benelux region, Scandinavia, and Ireland reported simultaneous IT incidents affecting their cooling infrastructure.From: Supermarket Cyberattack Expands to Nine European Countries, Spoiling Millions in Food ·
Illustration: Internet-connected temperature management systems were manipulated to spike internal freezer temperatures.From: Coordinated Cyberattacks Target Supermarket Refrigeration Systems Across Six European Nations ·
Illustration: Retailers faced immediate logistical challenges as they worked to clear ruined inventory from the compromised units.From: Coordinated Cyberattacks Target Supermarket Refrigeration Systems Across Six European Nations ·
Illustration: Several affected grocery locations were forced to close temporarily while technicians disconnected the compromised network hardware.From: Coordinated Cyberattacks Target Supermarket Refrigeration Systems Across Six European Nations ·
Illustration: Attackers accessed internet-connected control panels to push temperature setpoints to 50 degrees Celsius.From: Hackers Spoil Food Across Hundreds of French Supermarkets by Breaching Refrigeration Controllers ·
Illustration: Technicians must inspect the overstressed cooling hardware for physical damage before stores can safely restock.From: Hackers Spoil Food Across Hundreds of French Supermarkets by Breaching Refrigeration Controllers ·
Show 1 more
Illustration: The sudden thermal shift caused immediate and irreversible damage to hundreds of tons of stored inventory.From: Hackers Spoil Food Across Hundreds of French Supermarkets by Breaching Refrigeration Controllers ·