Signal
Submitted
Nov 4, 2026, 14:09 UTC
Italy confirms cyber intrusions against supermarket and food logistics refrigeration systems amid a broader European campaign targeting internet-connected cold-chain infrastructure, likely linked to low-cost hybrid-warfare style cyber activity with unclear attribution.
Article reports a wave of cyber intrusions against internet-connected industrial and commercial refrigeration systems in European food supply chains, with Italy confirming it has become one of the targets. Italian authorities, including the Prime Minister's office, intelligence agencies, the National Cybersecurity Agency (ACN), Postal and Communications Police, and Carabinieri NAS, are responding. Incidents in Italy include unauthorized access to refrigeration at supermarkets and food distributors, with specific investigations in Sicily, Emilia-Romagna, and a notified incident from a Tuscany-based catering company, plus a suspected attack on an Emilia-Romagna frozen-food producer. The government states disruptions and public health risks are currently limited, with no evidence of food safety issues from thawing. Similar cyber incidents have been reported in Belgium, Luxembourg, Ireland, the Netherlands, Latvia, Finland, Sweden, and Germany, prompting European Commission-level discussions. Cybersecurity research from Vedere Labs (Forescout) documents over 20 claimed attacks on industrial and commercial refrigeration systems in 2026, many claimed by pro-Russian groups Z-Pentest Alliance and NoName057(16), targeting supermarkets, agricultural warehouses, wineries, and food-processing facilities in Italy, Spain, and other European countries. Attackers exploit exposed industrial control interfaces to change temperatures, defrost cycles, and other settings, potentially spoiling food and causing economic loss without sophisticated malware. Attribution for the latest incidents remains officially unknown; experts note they could represent either state-backed capability demonstrations or independent hackers, with limited forensics hampering distinction between opportunistic intrusions and intelligence-linked sabotage. Italian political figures frame the events within a hybrid warfare context, with COPASIR vice president Giovanni Donzelli calling them evidence of ongoing hybrid conflict and urging cybersecurity and defense investment, while Deputy Prime Minister Matteo Salvini urges caution on blaming Russia. The ACN issues defensive guidance such as isolating industrial control systems, securing remote access via VPN and MFA, and reviewing privileged accounts. European Commissioner for Preparedness and Crisis Management Hadja Lahbib characterizes the situation as a security "gray zone" where Europe is "not at war, but not at peace either," highlighting how everyday civilian services like supermarkets are exposed to cyber threats.
Confidence: High
Primary focus is on malicious cyber intrusions targeting civilian critical infrastructure (food cold chains) in Italy and across Europe, with explicit discussion of hybrid warfare context and pro-Russian hacktivist involvement; defensive measures are secondary coverage. This aligns with Cyber & Information Warfare / critical infrastructure attacks and represents hostile activity rather than routine defense preparation.
Source URL
https://decode39.com/17199/cyberattacks-hit-europes-food-supply-chains-italy-joins-the-list-of-targets
Source reliability
F
Info credibility
2
Event time
Dec 7, 2039, 12:00 UTC
Event time confidence
unknown
Location
Italy
Primary actor
Z-Pentest Alliance
Country
Italy
Tags
Italy, European Union, food supply chain, critical infrastructure, industrial control systems, ICS, OT security, refrigeration systems, supermarkets, military logistics, cyber intrusion, pro-Russian hacking groups, Z-Pentest Alliance, NoName057(16), ACN, Carabinieri NAS, Postal and Communications Police, hybrid warfare, low-sophistication attacks, public health risk, economic disruption
Signal
Submitted
Nov 4, 2026, 14:09 UTC
Italy confirms cyber intrusions against supermarket and food logistics refrigeration systems amid a broader European campaign targeting internet-connected cold-chain infrastructure, likely linked to low-cost hybrid-warfare style cyber activity with unclear attribution.
Article reports a wave of cyber intrusions against internet-connected industrial and commercial refrigeration systems in European food supply chains, with Italy confirming it has become one of the targets. Italian authorities, including the Prime Minister's office, intelligence agencies, the National Cybersecurity Agency (ACN), Postal and Communications Police, and Carabinieri NAS, are responding. Incidents in Italy include unauthorized access to refrigeration at supermarkets and food distributors, with specific investigations in Sicily, Emilia-Romagna, and a notified incident from a Tuscany-based catering company, plus a suspected attack on an Emilia-Romagna frozen-food producer. The government states disruptions and public health risks are currently limited, with no evidence of food safety issues from thawing. Similar cyber incidents have been reported in Belgium, Luxembourg, Ireland, the Netherlands, Latvia, Finland, Sweden, and Germany, prompting European Commission-level discussions. Cybersecurity research from Vedere Labs (Forescout) documents over 20 claimed attacks on industrial and commercial refrigeration systems in 2026, many claimed by pro-Russian groups Z-Pentest Alliance and NoName057(16), targeting supermarkets, agricultural warehouses, wineries, and food-processing facilities in Italy, Spain, and other European countries. Attackers exploit exposed industrial control interfaces to change temperatures, defrost cycles, and other settings, potentially spoiling food and causing economic loss without sophisticated malware. Attribution for the latest incidents remains officially unknown; experts note they could represent either state-backed capability demonstrations or independent hackers, with limited forensics hampering distinction between opportunistic intrusions and intelligence-linked sabotage. Italian political figures frame the events within a hybrid warfare context, with COPASIR vice president Giovanni Donzelli calling them evidence of ongoing hybrid conflict and urging cybersecurity and defense investment, while Deputy Prime Minister Matteo Salvini urges caution on blaming Russia. The ACN issues defensive guidance such as isolating industrial control systems, securing remote access via VPN and MFA, and reviewing privileged accounts. European Commissioner for Preparedness and Crisis Management Hadja Lahbib characterizes the situation as a security "gray zone" where Europe is "not at war, but not at peace either," highlighting how everyday civilian services like supermarkets are exposed to cyber threats.
Confidence: High
Primary focus is on malicious cyber intrusions targeting civilian critical infrastructure (food cold chains) in Italy and across Europe, with explicit discussion of hybrid warfare context and pro-Russian hacktivist involvement; defensive measures are secondary coverage. This aligns with Cyber & Information Warfare / critical infrastructure attacks and represents hostile activity rather than routine defense preparation.
Source URL
https://decode39.com/17199/cyberattacks-hit-europes-food-supply-chains-italy-joins-the-list-of-targets
Source reliability
F
Info credibility
2
Event time
Dec 7, 2039, 12:00 UTC
Event time confidence
unknown
Location
Italy
Primary actor
Z-Pentest Alliance
Country
Italy
Tags
Italy, European Union, food supply chain, critical infrastructure, industrial control systems, ICS, OT security, refrigeration systems, supermarkets, military logistics, cyber intrusion, pro-Russian hacking groups, Z-Pentest Alliance, NoName057(16), ACN, Carabinieri NAS, Postal and Communications Police, hybrid warfare, low-sophistication attacks, public health risk, economic disruption