full timeline
European supermarket refrigeration cyberattacks
Follow European supermarket refrigeration cyberattacks in the Factlen app and get an alert when there is news. Get the app
Share this story
Latest
By 04:54 UTC on November 3, the cyberattacks on supermarket refrigeration systems had expanded to nine European countries. Hackers remotely triggered continuous defrost cycles in internet-exposed legacy refrigeration controllers.
Major grocery chains, including Carrefour and SuperValu, were forced to discard millions in spoiled food as a result of the November 3 breaches. EU officials condemned the sabotage as a deliberate strike on the food supply chain, while no group has claimed responsibility for the intrusions.
How the story developed
The sabotage campaign began on October 14, when a coordinated cyberattack targeted internet-connected temperature controllers at hundreds of grocery chains in France. By 04:26 UTC, it was reported that the intrusion exploited basic network vulnerabilities, specifically targeting operational technology that lacked proper segmentation from the public internet.
During the initial October 14 breach, attackers altered temperature setpoints, pushing cooling units to 50 degrees Celsius. This caused minor electrical fires as the hardware strained and resulted in tens of millions of euros in damages.
Following the October 14 incident, cybersecurity agencies urged retailers to immediately sever direct web access for all environmental control units to prevent further physical damage.
The localized attacks in France escalated into a transnational network intrusion on November 2. By 21:21 UTC, hackers had breached the internet-connected refrigeration controllers of supermarket chains across six European countries.
During the November 2 expansion, malicious actors disabled safety protocols to spike commercial freezer temperatures. This forced freezers to defrost and destroyed massive quantities of food across the affected nations. In response, cybersecurity experts advised retailers to physically disconnect their temperature management systems from external networks.
Charts, maps and images
Show 1 moreShow fewer
Timeline
November 2026
Supermarket Cyberattack Expands to Nine European Countries, Spoiling Millions in Food
Coordinated Cyberattacks Target Supermarket Refrigeration Systems Across Six European Nations
October 2026
Hackers Spoil Food Across Hundreds of French Supermarkets by Breaching Refrigeration Controllers


