Remotely controlled supermarket refrigeration systems across Europe were hacked, heating units and spoiling food; the UK meat sector experienced limited spill-over as NCSC works with retailers to mitigate vulnerabilities, but the attacker and motive remain unknown.

Cyber & Information WarfareCyber AttacksAttacks on critical infrastructure (energy, transport, hospitals)

Aggressor

Summary

A coordinated cyber-attack against remotely managed supermarket refrigeration systems across Europe has also affected parts of the UK's food supply chain. The UK National Cyber Security Centre (NCSC) reported "a couple of instances where vulnerable technology had been exploited in the UK" and worked overnight to alert potentially exposed organisations. The British Association of Independent Meat Suppliers (AIMS), representing more than 300 members, said some of its members became "collateral" in the attacks: two members saw fridges begin to defrost and another reported cold units heating up to 100C, though the affected units were empty so no produce was lost. The wider campaign raised temperatures in supermarket fridges and freezers in at least Ireland, Sweden, Estonia, Belgium, the Netherlands, Finland, Luxembourg and France, forcing many retailers to discard spoiled food worth hundreds of thousands to millions of euros. The attacks exploited previously disclosed vulnerabilities in remote-control systems for refrigeration units. Attribution is currently unknown; NCSC chief executive Richard Horne said it was "too early to say" who was responsible but warned that ageing, unpatched, internet-connected operational technology across sectors constitutes "low-hanging fruit" for hackers and that AI may help adversaries find and exploit such weaknesses faster. UK retailers, via the British Retail Consortium, stated they invest heavily in cybersecurity and are working with NCSC to secure fridge and freezer infrastructure, while NCSC operations director Paul Chichester said UK impact remains "minimal" and that the agency is helping organisations identify and close existing vulnerabilities before they are exploited.

Classification

Confidence: High

Primary subject is a malicious cross-border cyber operation exploiting OT vulnerabilities to disrupt food supply chains, fitting Cyber & Information Warfare / Cyber Attacks against critical infrastructure. Article clearly describes technical vector, geographic spread, and response by national cyber authorities. Aggressor is hostile by nature of attack, though unidentified. Signal_type is HYBRID_SIGNAL because focus is the incident and its immediate effects, with defensive cooperation as secon...

Source URL

https://bbc.com/news/articles/ckq6ndq8l6v0o

Open source

Provenance

Publisher: extension
Submitted: Nov 3, 2026, 14:20 UTC
Last updated: Nov 8, 2026, 13:55 UTC
Event time: Feb 2, 2026, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "14b1be8f-901e-4bdf-8bc3-bad5a53adda5",
  "url": "https://bbc.com/news/articles/ckq6ndq8l6v0o",
  "source": "extension",
  "status": "processed",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "1",
  "tags": [
    "operational-technology",
    "ICS/SCADA",
    "food-supply-chain",
    "refrigeration-control-systems",
    "critical-infrastructure",
    "cross-border-cyber-attack",
    "european union",
    "United-Kingdom",
    "NCSC",
    "AIMS",
    "Delhaize",
    "Sabcobel",
    "AI-enabled-cyber",
    "economic-disruption",
    "OT-vulnerabilities"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "A coordinated cyber-attack against remotely managed supermarket refrigeration systems across Europe has also affected parts of the UK's food supply chain. The UK National Cyber Security Centre (NCSC) reported \"a couple of instances where vulnerable technology had been exploited in the UK\" and worked overnight to alert potentially exposed organisations. The British Association of Independent Meat Suppliers (AIMS), representing more than 300 members, said some of its members became \"collateral\" in the attacks: two members saw fridges begin to defrost and another reported cold units heating up to 100C, though the affected units were empty so no produce was lost. The wider campaign raised temperatures in supermarket fridges and freezers in at least Ireland, Sweden, Estonia, Belgium, the Netherlands, Finland, Luxembourg and France, forcing many retailers to discard spoiled food worth hundreds of thousands to millions of euros. The attacks exploited previously disclosed vulnerabilities in remote-control systems for refrigeration units. Attribution is currently unknown; NCSC chief executive Richard Horne said it was \"too early to say\" who was responsible but warned that ageing, unpatched, internet-connected operational technology across sectors constitutes \"low-hanging fruit\" for hackers and that AI may help adversaries find and exploit such weaknesses faster. UK retailers, via the British Retail Consortium, stated they invest heavily in cybersecurity and are working with NCSC to secure fridge and freezer infrastructure, while NCSC operations director Paul Chichester said UK impact remains \"minimal\" and that the agency is helping organisations identify and close existing vulnerabilities before they are exploited.",
  "summary_short": "Remotely controlled supermarket refrigeration systems across Europe were hacked, heating units and spoiling food; the UK meat sector experienced limited spill-over as NCSC works with retailers to mitigate vulnerabilities, but the attacker and motive remain unknown.",
  "summary_extended": null,
  "actor_primary": "National Cyber Security Centre (NCSC)",
  "target_primary": null,
  "location_text": "United Kingdom",
  "location_region": null,
  "location_coordinates_lat": 55.378051,
  "location_coordinates_lon": -3.435973,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Primary subject is a malicious cross-border cyber operation exploiting OT vulnerabilities to disrupt food supply chains, fitting Cyber & Information Warfare / Cyber Attacks against critical infrastructure. Article clearly describes technical vector, geographic spread, and response by national cyber authorities. Aggressor is hostile by nature of attack, though unidentified. Signal_type is HYBRID_SIGNAL because focus is the incident and its immediate effects, with defensive cooperation as secon...",
  "event_time_utc": "2026-02-02T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-11-03T14:20:00.246Z",
  "updated_at": "2026-11-08T13:55:10.398Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "low",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: LowSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Feb 2, 2026, 00:00 UTC

Event time confidence

pm24h

Location

United Kingdom

Primary actor

National Cyber Security Centre (NCSC)

Country

United Kingdom

Tags

operational-technology, ICS/SCADA, food-supply-chain, refrigeration-control-systems, critical-infrastructure, cross-border-cyber-attack, european union, United-Kingdom, NCSC, AIMS, Delhaize, Sabcobel, AI-enabled-cyber, economic-disruption, OT-vulnerabilities

Loading signal...

{ "id": "14b1be8f-901e-4bdf-8bc3-bad5a53adda5", "url": "https://bbc.com/news/articles/ckq6ndq8l6v0o", "source": "extension", "status": "processed", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)", "country": "United Kingdom", "source_reliability": "B", "info_credibility": "1", "tags": [ "operational-technology", "ICS/SCADA", "food-supply-chain", "refrigeration-control-systems", "critical-infrastructure", "cross-border-cyber-attack", "european union", "United-Kingdom", "NCSC", "AIMS", "Delhaize", "Sabcobel", "AI-enabled-cyber", "economic-disruption", "OT-vulnerabilities" ], "nodes": [], "countries": [], "where_text": "Cyberspace", "headline": null, "description": "A coordinated cyber-attack against remotely managed supermarket refrigeration systems across Europe has also affected parts of the UK's food supply chain. The UK National Cyber Security Centre (NCSC) reported \"a couple of instances where vulnerable technology had been exploited in the UK\" and worked overnight to alert potentially exposed organisations. The British Association of Independent Meat Suppliers (AIMS), representing more than 300 members, said some of its members became \"collateral\" in the attacks: two members saw fridges begin to defrost and another reported cold units heating up to 100C, though the affected units were empty so no produce was lost. The wider campaign raised temperatures in supermarket fridges and freezers in at least Ireland, Sweden, Estonia, Belgium, the Netherlands, Finland, Luxembourg and France, forcing many retailers to discard spoiled food worth hundreds of thousands to millions of euros. The attacks exploited previously disclosed vulnerabilities in remote-control systems for refrigeration units. Attribution is currently unknown; NCSC chief executive Richard Horne said it was \"too early to say\" who was responsible but warned that ageing, unpatched, internet-connected operational technology across sectors constitutes \"low-hanging fruit\" for hackers and that AI may help adversaries find and exploit such weaknesses faster. UK retailers, via the British Retail Consortium, stated they invest heavily in cybersecurity and are working with NCSC to secure fridge and freezer infrastructure, while NCSC operations director Paul Chichester said UK impact remains \"minimal\" and that the agency is helping organisations identify and close existing vulnerabilities before they are exploited.", "summary_short": "Remotely controlled supermarket refrigeration systems across Europe were hacked, heating units and spoiling food; the UK meat sector experienced limited spill-over as NCSC works with retailers to mitigate vulnerabilities, but the attacker and motive remain unknown.", "summary_extended": null, "actor_primary": "National Cyber Security Centre (NCSC)", "target_primary": null, "location_text": "United Kingdom", "location_region": null, "location_coordinates_lat": 55.378051, "location_coordinates_lon": -3.435973, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Primary subject is a malicious cross-border cyber operation exploiting OT vulnerabilities to disrupt food supply chains, fitting Cyber & Information Warfare / Cyber Attacks against critical infrastructure. Article clearly describes technical vector, geographic spread, and response by national cyber authorities. Aggressor is hostile by nature of attack, though unidentified. Signal_type is HYBRID_SIGNAL because focus is the incident and its immediate effects, with defensive cooperation as secon...", "event_time_utc": "2026-02-02T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-11-03T14:20:00.246Z", "updated_at": "2026-11-08T13:55:10.398Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "moderate", "attribution_confidence_band": "low", "attribution_basis": "single_source" }