conv.

All stories
SecurityQuiet 8d · day 10

Second wave of fridge-hacking cyberattacks spreads to 13 European countries

Hackers remotely cranked supermarket refrigeration units up to 50C across Sweden, Belgium and a growing list of countries, destroying food and prompting EU and UK warnings.

What to know

  • A second wave of fridge-control hacks has now hit at least 13 European countries, following an earlier October attack on roughly 700 French supermarkets.
  • Attackers remotely raised refrigeration temperatures to 50-55C, spoiling food worth millions of euros and forcing retailers to dump stock.
  • EU and UK officials describe the attacks as a deliberate, recurring threat to food supply infrastructure, with the UK's cybersecurity chief warning further attacks are coming.
  • Technical discussion centers on why refrigeration controllers are exposed to the internet at all, with reports of default factory passwords and unpatched, end-of-life systems.

The dispute Whether exposing refrigeration controls to remote internet access is an inherently reckless design choice or a legitimate operational necessity that was merely implemented insecurely (weak passwords, no VPN, EOL systems). · positions read across 207 posts and comments

most voices

This is a basic, avoidable security failure by retailers and vendors who exposed critical systems with weak or default credentials.

  • “This is a total failure by the vendors of these freezers.”

    lambdaone · Hacker News ↗
many voices

Remote control of commercial refrigeration is genuinely complex (deadbands, defrost cycles, compressor pressure) and can't simply be replaced with a manual knob.

  • “The problem is that these refrigerator cases are not as simple as your refrigerator at home... You also have control over defrost cycles, compressor pressure and many other things”

    chromaton · Hacker News ↗
some voices

This looks like Russian hybrid warfare designed to test Europe's resilience and spread fear.

  • “A certain large country to the east of Europe is testing Europe's resilience and has been doing so for many years in various ways... It has been Putin's playbook for more than a decade”

    Prestigious_Sea_5121 · Reddit ↗
some voices

Mocking disbelief that basic appliances like fridges can be hacked at all, and that stores didn't disconnect after the first French attack.

  • “You connect appliances to the internet, this is what you get. You should not be able to hack yoghurt.”

    TheBreadmonkey · Mastodon ↗

Christophe Hansen EU food and agriculture commissionerJohn Billow Head of Sweden's national cybersecurity centreStephan Moelans CEO of Sabcobel, operator of Delhaize's refrigeration systemsICA / Coop Swedish supermarket chainsAhold Delhaize Dutch retailer, parent of Belgian/Luxembourg stores hitUnidentified hackers Perpetrators of the attacks

Second wave of fridge-hacking cyberattacks spreads to 13 European countries
theguardian.com

How it unfolded 6 developments, newest first · click a bar or a number to jump articlesvideospostscomments

Peak 187 pieces in 3h at Nov 2, 5 AM; 642 pieces over 10 days (320 articles · 13 videos · 176 posts · 133 comments) Nov 2, 2 AM — 22 pieces · 12 articles · 8 posts · 2 comments — Newswires 6, Google News 6, Hacker News 4, +3 moreNov 2, 5 AM — 187 pieces · 108 articles · 49 posts · 30 comments — Newswires 83, Mastodon 36, Reddit 20, +4 moreNov 2, 8 AM — 90 pieces · 36 articles · 21 posts · 33 comments — Hacker News 23, Newswires 20, Google News 15, +3 moreNov 2, 11 AM — 81 pieces · 37 articles · 4 videos · 22 posts · 18 comments — Newswires 23, Mastodon 16, Google News 14, +4 moreNov 2, 2 PM — 44 pieces · 22 articles · 13 posts · 9 comments — Google News 12, Newswires 10, Mastodon 8, +3 moreNov 2, 5 PM — 22 pieces · 8 articles · 1 video · 7 posts · 6 comments — Mastodon 6, Google News 5, Reddit 4, +3 moreNov 2, 8 PM — 10 pieces · 5 articles · 1 video · 2 posts · 2 comments — Google News 3, Newswires 2, Mastodon 1, +4 moreNov 2, 11 PM — 11 pieces · 4 articles · 2 videos · 5 posts — Mastodon 4, Newswires 3, YouTube 2, +2 moreNov 3, 2 AM — 27 pieces · 8 articles · 1 video · 4 posts · 14 comments — Reddit 13, Newswires 4, Google News 4, +4 moreNov 3, 5 AM — 34 pieces · 21 articles · 1 video · 12 posts — Newswires 13, Google News 8, Mastodon 7, +4 moreNov 3, 8 AM — 22 pieces · 19 articles · 1 post · 2 comments — Google News 10, Newswires 9, Reddit 2, +1 moreNov 3, 11 AM — 15 pieces · 5 articles · 1 video · 6 posts · 3 comments — Newswires 5, Mastodon 5, Reddit 4, +1 moreNov 3, 2 PM — 6 pieces · 3 articles · 3 posts — Mastodon 3, Newswires 2, Google News 1Nov 3, 5 PM — 3 pieces · 1 article · 2 posts — Mastodon 2, Newswires 1Nov 3, 8 PM — 8 pieces · 4 articles · 4 comments — Google News 3, Reddit 2, Hacker News 2, +1 moreNov 3, 11 PM — 2 pieces · 1 article · 1 comment — Google News 1, Reddit 1Nov 4, 2 AM — 4 pieces · 2 articles · 1 post · 1 comment — Reddit 2, Newswires 1, Mastodon 1Nov 4, 5 AM — 4 pieces · 2 articles · 1 post · 1 comment — Reddit 1, Google News 1, Hacker News 1, +1 moreNov 4, 8 AM — 2 pieces · 1 article · 1 comment — Newswires 1, Reddit 1Nov 4, 11 AM — 4 pieces · 2 articles · 1 post · 1 comment — Bluesky 1, Mastodon 1, Reddit 1, +1 moreNov 4, 2 PM — quietNov 4, 5 PM — quietNov 4, 8 PM — 1 piece · 1 article — Newswires 1Nov 4, 11 PM — 1 piece · 1 video — YouTube 1Nov 5, 2 AM — 1 piece · 1 article — Newswires 1Nov 5, 5 AM — quietNov 5, 8 AM — 2 pieces · 2 articles — Newswires 2Nov 5, 11 AM — 9 pieces · 5 articles · 4 posts — Newswires 4, Bluesky 2, Mastodon 2, +1 moreNov 5, 2 PM — quietNov 5, 5 PM — 3 pieces · 1 article · 2 posts — Reddit 1, Newswires 1, Mastodon 1Nov 5, 8 PM — quietNov 5, 11 PM — 2 pieces · 1 post · 1 comment — Reddit 2Nov 6, 2 AM — 2 pieces · 1 article · 1 comment — Reddit 1, Newswires 1Nov 6, 5 AM — 1 piece · 1 post — Mastodon 1Nov 6, 8 AM — 1 piece · 1 post — Mastodon 1Nov 6, 11 AM — 3 pieces · 1 article · 1 video · 1 post — Mastodon 1, Newswires 1, YouTube 1Nov 6, 2 PM — 1 piece · 1 article — Mastodon 1Nov 6, 5 PM — quietNov 6, 8 PM — quietNov 6, 11 PM — 1 piece · 1 article — Newswires 1Nov 7, 2 AM — 5 pieces · 2 articles · 3 posts — Mastodon 4, Newswires 1Nov 7, 5 AM — 1 piece · 1 post — Mastodon 1Nov 7, 8 AM — quietNov 7, 11 AM — 1 piece · 1 article — Newswires 1Nov 7, 2 PM — quietNov 7, 5 PM — 3 pieces · 1 post · 2 comments — Reddit 2, Mastodon 1Nov 7, 8 PM — quietNov 7, 11 PM — quietNov 8, 2 AM — 1 piece · 1 comment — Reddit 1Nov 8, 5 AM — quietNov 8, 8 AM — 1 piece · 1 post — Hacker News 1Nov 8, 11 AM — quietNov 8, 2 PM — quietNov 8, 5 PM — quietNov 8, 8 PM — 2 pieces · 2 posts — Bluesky 1, Mastodon 1Nov 8, 11 PM — 2 pieces · 2 articles — Google News 1, Newswires 1Nov 9, 2 AM — quietNov 9, 5 AM — quietNov 9, 8 AM — quietNov 9, 11 AM — quietNov 9, 2 PM — quietNov 9, 5 PM — quietNov 9, 8 PM — quietNov 9, 11 PM — quietNov 10, 2 AM — quietNov 10, 5 AM — quietNov 10, 8 AM — quietNov 10, 11 AM — quietNov 10, 2 PM — quietNov 10, 5 PM — quietNov 10, 8 PM — quietNov 10, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quiet 1–345–6
Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9Nov 10now · 12:46 AM ET
  1. 6

    UK cyber chief warns attacks are 'just the start' as stores rush patches

    The UK's cybersecurity chief said the fridge attacks were only the beginning of similar incidents, as European supermarkets rushed to upgrade systems and patch vulnerabilities exposed by the campaign.

    1. first by Japan Today, 8d ago · also Indian Express, Naharnet, Philadelphia Inquirer, Independent UK, Yahoo! Finance Canada, Tech Xplore +4

      1 more headline
    2. first by ABC News & Headlines – Australian Broadcasting Corporation, 9d ago · also AP News, Japan Today, Philadelphia Inquirer, Denver Post, Orlando Sentinel, Baltimore Sun +2

      1 more headline
    10 more claims →
    • mshelton.bsky.social

      Guys, holy heck, please stop connecting things to the internet that don't need to be connected to the internet.

      mshelton.bsky.socialBluesky3d ago39▲view on Bluesky ↗
    2 more of the top 3 · 34 posts in this stretch
    • Perhaps this is not quite the point you had intended to make, but I really am mystified at all of the explanations for why internet-connected freezers and refrigerators are being used. When people ask, "Why are they connected to the internet?" I don't think they're literally communicating that they don't know and want someone to tell them. I think…

      gravy_makerr/technology5d agoview on r/technology ↗
    • US # cybersecurity agency # CISA , the # FBI , and several other federal government departments warned in a joint statement that hackers are targeting and compromising internet-connected refrigeration and cold chain monitoring systems in # grocerystores and # coldstorage facilities. The statement said that the hacks are hitting critical…

      BenjaminHCCarr@hachyderm.ioMastodon5d agoview on Mastodon ↗
    all of them →
  2. 5

    Poland confirmed, bringing total to 13 countries hit

    Two refrigeration systems in Poland — a small grocery store and a food distribution facility — were attacked, bringing the total number of European countries targeted in the campaign to 13.

    “Poland has joined the list, bringing the total to 13 European countries targeted in the refrigeration cyberattack campaign.”
    — @InsiderGeo
    1. first by Straight Arrow, 9d ago · also CBS News

      1 more headline
    2. first by BleepingComputer, 9d ago

    • UPDATE: Poland has joined the list, bringing the total to 13 European countries targeted in the refrigeration cyberattack campaign. Two refrigeration systems in Poland were attacked yesterday, targeting a small grocery store and a food distribution facility. Employees noticed

      @InsiderGeoX8d ago430▲view on X ↗
    2 more of the top 3 · 15 posts in this stretch
    • npr.org

      NPR investigated cyberattacks on the digital devices that control industrial refrigerators, revealing the extent to which operational technology is exposed to damage and disruption.

      npr.orgBluesky8d ago212▲view on Bluesky ↗
    • A certain large country to the east of Europe is testing Europe's resilience and has been doing so for many years in various ways. That's one reason. The other is to panic people, to make them afraid. Along with other tactics - broader cyberattacks on governments and corporations, attacks on transport and energy infrastructure, disinformation…

      Prestigious_Sea_5121r/europe8d agoview on r/europe ↗
    all of them →
  3. 4

    Confirmed victim list grows to ten countries, two more suspected

    Researcher Lukasz Olejnik listed confirmed fridge-hack victims in Sweden, Belgium, Ireland, Luxembourg, Estonia, the Netherlands, Finland, Portugal, Germany and Italy, with Poland and Romania suspected, alongside extensive confirmed losses of refrigerated food.

    “Confirmed fridge cyberattack victims in Sweden, Belgium, Ireland, Luxembourg, Estonia, Netherlands, Finland, Portugal, Germany, Italy. Suspected in Poland and Romania. Extensive losses of refrigerated food are confirmed…”
    — Lukasz Olejnik
    1. first by The Hindu, 9d ago · also SecurityWeek, CNBC, Channel News Asia, Courthouse News, Dawn, Yahoo +2

      2 more headlines
    • LukaszOlejnik@mastodon.social

      Confirmed fridge cyberattack victims in Sweden, Belgium, Ireland, Luxembourg, Estonia, Netherlands, Finland, Portugal, Germany, Italy. Suspected in Poland and Romania. Extensive losses of refrigerated food are confirmed

      LukaszOlejnik@mastodon.socialMastodon8d ago21▲view on Mastodon ↗
    2 more of the top 3 · 19 posts in this stretch
    • This is a total failure by the vendors of these freezers.If you charge money for something that is critical national infrastructure - and the food delivery pipeline is absolutely CNI - and you connect it to the Internet, you should also be responsible for keeping it secure - or at the very minimum at least trying to do so.The same goes for other…

      lambdaoneHacker News8d agoview on Hacker News ↗
    • FFS, if you can hack multiple facilities across multiple countries why make food more expensive ? You could be getting Putin's copy of Trump's peepee tape. You could be diverting crypto like Best Korea. You could be scrambling the nuclear codes. Why attack food? The grocers aren't going to lower prices, they just lost inventory. They are going to…

      quequotionr/worldnews9d agoview on r/worldnews ↗
    all of them →
  4. 3

    Belgian and Swedish operators scramble to contain damage

    Sabcobel, which runs Delhaize's refrigeration systems in Belgium, said it mobilized technicians overnight to disconnect affected units; Sweden's cybersecurity centre said many exposed operational technology devices needed patching.

    “We started mobilising technicians at 1am…”
    — Stephan Moelans, CEO of Sabcobel
    1. first by TechCrunch, 9d ago · also SCMP, CNBC, ABC Australia, Quartz, The Canberra Times, Australian Broadcasting Corporation +12

      18 more headlines
    • BREAKING: Europe is under a massive cyber attack, with supermarket fridges and freezers in Belgium, Sweden, Luxembourg, Ireland, the Netherlands, Finland and Estonia all hacked today by raising temperatures to up to 50°C, destroying huge quantities of food, per Reuters.

      @HormuzLetterX9d ago13k▲view on X ↗
    2 more of the top 3 · 87 posts in this stretch
    • angiebaby

      Okay, so when the first group of European supermarkets lost all of their cold and frozen foods due to IoT hacking, the other European supermarkets disconnected their freezers from the internet, right? Right?

      angiebabyMastodon9d ago17▲view on Mastodon ↗
    • csolisr.hub.azkware.net.ap.brid.gy

      The Great Remote Unthawing of 2026 continues. Sadly, it's hardly a "cyberattack" because most of these freezers are directly exposed online, with what amounts to a single Cheeto of security (a.k.a. default passwords).

      csolisr.hub.azkware.net.ap.brid.gyBluesky9d ago2▲view on Bluesky ↗
    all of them →
  5. 2

    Attack spreads to at least seven countries, EU commissioner reacts

    Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden reported refrigeration failures; EU food and agriculture commissioner Christophe Hansen called the attacks a deliberate threat to the food supply chain.

    “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it…”
    — Christophe Hansen, EU food and agriculture commissioner
    1. first by DW.com, 9d ago · also The National UAE, The National, Deutsche Welle EN, CTV News, NBC News, Reuters +5

      10 more headlines
    2. first by The Times, 9d ago · also The Independent, The Telegraph, CNBC, Free Press Journal, RuntimeWire, International Business Times +3

      10 more headlines
    4 more claims →
    • BREAKING: Europe is under a massive widespread cyber attack right now Sweden, Belgium, Luxembourg, Estonia, Ireland the Netherlands and just now Finland are all experiencing disruptions to supermarket refrigeration systems causing food to go off. The attack is spreading...

      @WarMonitor3X9d ago37k▲view on X ↗
    2 more of the top 3 · 47 posts in this stretch
    • TheBreadmonkey@beige.party

      What did I say? You connect appliances to the internet, this is what you get. You should not be able to hack yoghurt. Shop freezers in six European countries hit by suspected cyber-attack https://www. bbc.co.uk/news/articles/cq1kd1 nee80eo

      TheBreadmonkey@beige.partyMastodon9d ago288▲view on Mastodon ↗
    • catherinefeore.bsky.social

      I remember covering an event - about 100 years ago - on the Internet of Things, it was going to be the next new thing. Even then I wondered if I would ever want an alert to learn that the milk in my fridge had past its use by date, only to ignore it

      catherinefeore.bsky.socialBluesky9d ago3▲view on Bluesky ↗
    all of them →
  6. 1

    Swedish chains ICA and Coop report overnight fridge hack

    ICA said several stores were hit by a cyberattack overnight that remotely set refrigerators and freezers to 50C; Coop said six of its shops were affected, with one store blaming the malfunction directly on hackers.

    “The temperature of freezers at several Swedish grocery stores rose sharply overnight, operators ICA and Coop said, with at least one store blaming the incident on a cyberattack…”
    — Reuters
    1. first by NY Post, 9d ago · also PBS NewsHour, Times of Israel, Yahoo, ABC News, Philadelphia Inquirer, KCCI +1

      4 more headlines
    2. first by HotAir, 9d ago · also TechRadar, Digit, Euro Weekly News, Telegraph India, Seeking Alpha

      5 more headlines
    6 more claims →
    • BREAKING: 🇸🇪 Swedish grocery giant ICA, one of Sweden's largest supermarket chains, says several of its stores have been hit by a cyberattack overnight, causing refrigerators and freezers to be remotely set to 50°C. The incident has likely resulted in large quantities of food

      @InsiderGeoX9d ago977▲view on X ↗
    2 more of the top 3 · 5 posts in this stretch
    • There's nothing wrong with network connected fridges. A large supermarket chain will have 1000s of fridges than needed to managed. The issue is securing the management portal: by either keeping it inside the corporate network but that's not always possible with SaaS services, in that case mandatory MFA and unique password should be a requirement…

      coomzeer/europe9d agoview on r/europe ↗
    • hrbrmstr@mastodon.social

      Now grocery store freezers in Sweden seem to have been hacked in similar fashion as was done in France — https://www. reuters.com/business/retail-co nsumer/temperature-soars-swedish-grocery-store-freezers-one-store-blames-hackers-2026-11-02/

      hrbrmstr@mastodon.socialMastodon9d agoview on Mastodon ↗
    all of them →
  7. background

    Hackers hit ~700 French supermarket fridges in first wave — Hackers seized control of cooling units in as many as 700 supermarkets in France, raising temperatures as high as 50C and causing fires and food losses estimated in the tens of millions of euros; supplier Danfoss later advised Dutch clients to disconnect systems from the internet.

Also covered reported alongside — the timeline has no entry for these yet

  1. first by Investing.com News, 6d ago · also TechCrunch, CNBC, Channel News Asia

    3 more headlines
  2. first by BBC Business, 9d ago · also Guardian Business, ABC News & Headlines – Australian Broadcasting Corporation, BBC

    3 more headlines
  3. first by RedState, 9d ago · also Financial Times, NYT, SBS

    3 more headlines
  4. first by Help Net Security, 9d ago · also CyberInsider, Globe and Mail, The Record

    3 more headlines
  5. first by Forbes Business, 7d ago · also HN Frontpage, BBC

    1 more headline
  6. first by The Independent, 8d ago · also Evening Standard, Guardian

    2 more headlines
  7. first by Sky News, 8d ago · also Anadolu Agency, Sky News Business

    1 more headline
  8. first by Boston Globe, 9d ago · also Japan Times, Euronews

    2 more headlines
  9. first by France 24 EN, 9d ago · also Le Monde EN, Euronews

    2 more headlines
  10. first by Mastodon, 4d ago · also Euronews

    1 more headline

and 45 smaller pieces

What people are saying 11 voices from 5 sites · best of 207 · verbatim

Still unanswered
  • Who is actually behind the attacks — a state actor like Russia, criminal hackers, or opportunistic scanning of exposed systems (e.g. via Shodan)?
  • Why didn't retailers harden their systems after the first French attack weeks earlier?
  • How many more countries or stores will be affected as the campaign continues?