#6Business
Supermarket freezers overheat across Europe in suspected cyber incidents
Food spoiled after supermarket freezers across Europe were switched to high heat.
3 Nov 2026, 06:24 · All sides · Written by Grok
15 sources · 4 countries🇬🇧 🇧🇪 🇫🇷 🇪🇸
- Overnight around 1–2 November 2026, supermarket refrigeration systems in several European countries warmed to as high as 50–55°C, and food spoiled.
- A similar incident in October had already hit about 700 stores in France, with fires and heavy losses in some cases.
- Retailers and cyber agencies are investigating; no group has claimed responsibility, and no attacker has been officially named.
How the views differ
Officials and commentators warning of deliberate food-supply sabotage
France in October, then a wider set of countries within weeks, is treated as one pattern.
Supporters say the point was spoiled food and lost trust, not a normal ransom crime or a protest hack.
They take an EU commissioner’s warning as the right alarm, and some suspect state-linked or hybrid pressure.
- politico.eu (Ind.)
- reuters.com (Ind.)
- theguardian.com (Ind.)
- independent.co.uk (Ind.)
- afp.com (Ind.)
Security reporters and engineers focused on old, exposed equipment
The same family of Danfoss devices keeps showing up, and many were past the point of getting fixes.
Public research had already warned that some models could be logged into remotely if left on the open internet.
Supporters say that is a maintenance failure many attackers could use, without sharing a war plan.
- reuters.com (Ind.)
- arstechnica.com (Ind.)
- securityweek.com (Ind.)
- bleepingcomputer.com (Ind.)
- afp.com (Ind.)
- View A — @owlreportonx: “🚨 Cyberattack hits Europe's food supply: supermarket fridges in at least 9 countries were remotely switched to defrost… The EU condemns a deliberate attack…”
- View B — @omiossec_med: “It happen in France in October, and now across Europe. Off course, no one check the system security”
The heat, the spoilage, the country list, the October French precursor, the Danfoss legacy gear, and the open investigations are reported by several independent outlets. Some retailers have called the events hacks. That much is solid. Who did it is not. No group has claimed the incidents, and no agency in the reporting has published an attribution. Hansen’s sentence is a serious official judgment.
Grey areas. Ask to dive deeper
Grok checks every side again and answers with sources.
Popular questions
Ask anything about this story. It's free with an account, 1 a week.
- 2025
CVE-2025-41450 disclosed for affected Danfoss refrigeration controller models.
Pre-2026: Danfoss AK-SM 800 and AK-SC 355 controllers reach end-of-life status with no further security updates.
Coverage
15 sources · 4 countries
- State-funded 2
- Independent 11
- X / on the ground 2
GBBEFRES
All sources
- Reuters (independent)Affected freezers reached 50–55°C (122–131°F). Reuters The GuardianIndependent · United Kingdom
- theguardian.comAffected freezers reached 50–55°C (122–131°F). Reuters The GuardianIndependent · United Kingdom
- The Independent (independent)Ireland’s SuperValu chain, part of Musgrave, reported 13 affected stores; Swedish chains included ICA and Coop. The IndependentIndependent · United Kingdom
- trestlewire.comMany units were older Danfoss controllers that no longer get security updates or ran old firmware, and systems were switched into defrost mode. TrestlewireIndependent
- POLITICO (independent)Brussels is reviewing how prepared retailers are after the commissioner called the incidents a food-supply attack. POLITICOIndependent · Belgium
- The Guardian (independent)Sources: Reuters; The Guardian; The Independent; POLITICO; AFPIndependent · United Kingdom
- afp.comSources: Reuters; The Guardian; The Independent; POLITICO; AFPIndependent · France
- Ars Technica (independent)Reporting says those models had critical bugs that allow remote login, and affected stores likely were not placed behind a VPN. Ars TechnicaIndependent
- securityweek.comSources: Ars Technica; SecurityWeek; BleepingComputer; Danfoss via Reuters and AFPIndependent
- bleepingcomputer.comSources: Ars Technica; SecurityWeek; BleepingComputer; Danfoss via Reuters and AFPIndependent
- @owlreportonxSources: Reuters (independent); The Guardian (independent); The Independent (independent); EU Commission statements via POLITICO/Reuters (official); AFP (independent, widely cited); X voices noting sabotage pattern (e.g., @owlreportonx, @HappyCamper2626 posts linking to supply chain attacks).X / on the ground
- @omiossec_medSources: Ars Technica (independent/tech-focused); SecurityWeek (independent); Danfoss statements via Reuters/AFP (company); BleepingComputer (independent); X voices highlighting vulnerabilities/outdated systems (e.g., @omiossec_med).X / on the ground
- Financial Times (independent)ft.comIndependent · United Kingdom
- EFE (state-funded, Spain)efe.comState-funded · Spain
- BBC (public broadcaster, UK)bbc.co.ukState-funded · United Kingdom