Second Wave of Cyberattacks Disables Freezers in European Supermarkets

A second wave of cyberattacks targeted freezers and refrigerators in supermarkets across several European countries on November 2. The attacks caused units to overheat and spoil perishable goods. Swedish stores reported sudden temperature rises. Similar incidents occurred in other nations. The pattern matches an earlier wave that affected commercial refrigeration systems.

Attackers appear to have compromised remote management software used by supermarket chains. Once inside the network they issued commands that disabled compressors or raised set points. Temperatures climbed above safe thresholds for dairy, meat, and frozen products. Stores pulled stock from shelves and discarded goods that had exceeded time-temperature limits. No injuries were reported, but the financial loss includes both the spoiled inventory and the temporary loss of sales.

The first wave had already drawn attention from cybersecurity firms and national computer emergency response teams. The second wave indicates that the initial remediation was incomplete. Chains that had not yet patched the affected software remained vulnerable. Some stores isolated their refrigeration controllers from the wider network as a temporary measure. That step restores local control but removes the ability to monitor temperatures remotely.

Supermarket refrigeration systems have become attractive targets because they combine internet-connected controllers with high-value perishable inventory. A successful attack produces immediate, visible damage without requiring data theft or ransomware payment. The attackers' motive remains unclear. No group has claimed responsibility. The incidents coincide with broader reports of cyber activity against critical infrastructure in Europe.

Retailers are now reviewing vendor access, firmware versions, and network segmentation. Insurance claims will require documentation of the temperature logs and the volume of discarded product. Some chains have switched to manual temperature checks while investigations continue. The scale is still being assessed. Early reports mention multiple countries and dozens of individual stores, but complete tallies have not been released.

The attacks demonstrate a shift from data-focused cybercrime toward physical-effect operations against commercial systems. Refrigeration units are not unique in this regard. Similar controllers exist in hospitals, data centers, and food processing plants. The supermarket incidents provide a public example of how remote access can be turned into spoilage. Companies that rely on connected equipment now face pressure to treat those devices as critical rather than convenience systems.

Authorities in the affected countries have begun coordinating through existing cyber information-sharing channels. The concrete outcome so far is wasted food, empty freezer cases, and a second demonstration that the same vulnerability can be exploited again. Stores that complete the necessary patches and network changes will reduce the risk of a third wave. Those that delay remain exposed to the same command set that already raised temperatures once.