Loading signal...
Signal
Submitted
Nov 3, 2026, 14:19 UTC
Networked refrigeration systems in supermarkets across nine European countries were remotely manipulated on 2 November 2026, forcing fridges and freezers into defrost or high-temperature modes, spoiling stock. Belgium was among the hardest hit, similar Danfoss-based systems were previously attacked in France, and the EU warns of a deliberate attempt to disrupt the food supply chain, though no perpetrator has been identified.
On 2 November 2026 a coordinated series of suspected cyberattacks targeted remote-controlled refrigeration systems in supermarkets and grocery stores across at least nine EU and European countries, forcing fridges and freezers into defrost or abnormally high-temperature modes and causing food spoilage. The affected countries confirmed so far are Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden, with a related earlier incident in France on 12 October 2026. The incidents primarily hit stores using network-connected refrigeration controllers supplied by Danish firm Danfoss or external refrigeration-service providers. In Italy, at least four Coop supermarkets in Sicily and one business in Tuscany were affected around 04:00 local time, targeting the Radenza Group's remote-control system for frozen sections; the issue was later resolved, and the government scheduled a cybersecurity meeting with intelligence services. Belgium appears among the hardest hit, with dozens of stores across Carrefour, Ikea (Mons outlet), Delhaize, Colruyt, and Intermarché reporting refrigeration failures; federal prosecutors opened an investigation, and refrigeration company Sabcobel said some of its not-yet-upgraded systems were compromised despite efforts begun after the October French attack. Ireland's Musgrave group reported a cyber incident impacting 13 Supervalu stores. In the Netherlands, a small number of corner shops experienced disruptions. Portugal's Mosqueteiros group confirmed cyber incidents at seven Intermarché stores, saying the attack appeared to target an external provider managing refrigeration systems. In Sweden, Coop reported six of about 800 stores were hit via outlets connected to older 4G-network-based systems; Ica reported a limited number of stores with refrigeration issues tied to an external control system from Danfoss, the same supplier hit in France. Finland's Kesko group detected irregular temperatures in a few smaller stores and was investigating possible network interference; the National Cyber Security Centre at Traficom said cyber interference could not be ruled out and noted that rapid exploitation of vulnerabilities has become typical. Estonia reported that at least one supermarket's hackers raised refrigeration temperatures to 50°C; the affected units were older Danfoss models similar to those in the French attack. EU Commissioner for Agriculture and Food Christophe Hansen said the bloc views the incidents as a deliberate attempt to disrupt the EU food supply chain and erode consumer confidence. No actor has claimed responsibility for either the November incidents or the October 12 French attack. Industry association APPLiA argued that cyber resilience of connected supermarket appliances requires both design-stage security and operational contingency (e.g., staff ability to manually check and secure cold-chain conditions) and tied the events to forthcoming implementation of the EU Cyber Resilience Act. Overall, the incidents illustrate a cross-border exploitation of industrial IoT vulnerabilities in the European food retail infrastructure, with potential hybrid-warfare implications but no attribution yet.
Confidence: High
The article repeatedly labels the events as cyberattacks or cyber incidents against network-connected refrigeration systems, details operational impacts (spoiled food, multiple chains and countries affected), and cites official investigations and statements framing them as deliberate disruption of the food supply chain. This clearly fits Cyber & Information Warfare under cyber attacks on critical infrastructure, and the focus is on the hostile incidents themselves, justifying HYBRID_SIGNAL an...
Source URL
https://euronews.com/2026/11/03/which-countries-in-europe-have-been-hit-by-supermarket-fridge-cyber-incidents
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "f34d0c70-28cc-4c7f-a607-eac7d46ba87d",
"url": "https://euronews.com/2026/11/03/which-countries-in-europe-have-been-hit-by-supermarket-fridge-cyber-incidents",
"source": "extension",
"status": "processed",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
"country": "Belgium",
"source_reliability": "B",
"info_credibility": "2",
"tags": [
"supermarket cyberattack",
"refrigeration systems",
"industrial IoT",
"food supply chain",
"critical infrastructure",
"Belgium",
"Italy",
"Sweden",
"Finland",
"Estonia",
"Ireland",
"Luxembourg",
"Netherlands",
"Portugal",
"France",
"Danfoss",
"Coop",
"Carrefour",
"Ica",
"Intermarché",
"Delhaize",
"Colruyt",
"Musgrave",
"Mosqueteiros",
"EU Cyber Resilience Act",
"Traficom",
"APPLiA",
"remote access control",
"4G network exposure"
],
"nodes": [],
"countries": [],
"where_text": "Cyberspace",
"headline": null,
"description": "On 2 November 2026 a coordinated series of suspected cyberattacks targeted remote-controlled refrigeration systems in supermarkets and grocery stores across at least nine EU and European countries, forcing fridges and freezers into defrost or abnormally high-temperature modes and causing food spoilage. The affected countries confirmed so far are Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden, with a related earlier incident in France on 12 October 2026. The incidents primarily hit stores using network-connected refrigeration controllers supplied by Danish firm Danfoss or external refrigeration-service providers. In Italy, at least four Coop supermarkets in Sicily and one business in Tuscany were affected around 04:00 local time, targeting the Radenza Group's remote-control system for frozen sections; the issue was later resolved, and the government scheduled a cybersecurity meeting with intelligence services. Belgium appears among the hardest hit, with dozens of stores across Carrefour, Ikea (Mons outlet), Delhaize, Colruyt, and Intermarché reporting refrigeration failures; federal prosecutors opened an investigation, and refrigeration company Sabcobel said some of its not-yet-upgraded systems were compromised despite efforts begun after the October French attack. Ireland's Musgrave group reported a cyber incident impacting 13 Supervalu stores. In the Netherlands, a small number of corner shops experienced disruptions. Portugal's Mosqueteiros group confirmed cyber incidents at seven Intermarché stores, saying the attack appeared to target an external provider managing refrigeration systems. In Sweden, Coop reported six of about 800 stores were hit via outlets connected to older 4G-network-based systems; Ica reported a limited number of stores with refrigeration issues tied to an external control system from Danfoss, the same supplier hit in France. Finland's Kesko group detected irregular temperatures in a few smaller stores and was investigating possible network interference; the National Cyber Security Centre at Traficom said cyber interference could not be ruled out and noted that rapid exploitation of vulnerabilities has become typical. Estonia reported that at least one supermarket's hackers raised refrigeration temperatures to 50°C; the affected units were older Danfoss models similar to those in the French attack. EU Commissioner for Agriculture and Food Christophe Hansen said the bloc views the incidents as a deliberate attempt to disrupt the EU food supply chain and erode consumer confidence. No actor has claimed responsibility for either the November incidents or the October 12 French attack. Industry association APPLiA argued that cyber resilience of connected supermarket appliances requires both design-stage security and operational contingency (e.g., staff ability to manually check and secure cold-chain conditions) and tied the events to forthcoming implementation of the EU Cyber Resilience Act. Overall, the incidents illustrate a cross-border exploitation of industrial IoT vulnerabilities in the European food retail infrastructure, with potential hybrid-warfare implications but no attribution yet.",
"summary_short": "Networked refrigeration systems in supermarkets across nine European countries were remotely manipulated on 2 November 2026, forcing fridges and freezers into defrost or high-temperature modes, spoiling stock. Belgium was among the hardest hit, similar Danfoss-based systems were previously attacked in France, and the EU warns of a deliberate attempt to disrupt the food supply chain, though no perpetrator has been identified.",
"summary_extended": null,
"actor_primary": null,
"target_primary": null,
"location_text": "Supermarkets in Belgium",
"location_region": null,
"location_coordinates_lat": 50.503887,
"location_coordinates_lon": 4.469936,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article repeatedly labels the events as cyberattacks or cyber incidents against network-connected refrigeration systems, details operational impacts (spoiled food, multiple chains and countries affected), and cites official investigations and statements framing them as deliberate disruption of the food supply chain. This clearly fits Cyber & Information Warfare under cyber attacks on critical infrastructure, and the focus is on the hostile incidents themselves, justifying HYBRID_SIGNAL an...",
"event_time_utc": "2026-11-02T03:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-11-03T14:19:00.038Z",
"updated_at": "2026-11-04T02:48:28.691Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
2
Event time
Nov 2, 2026, 03:00 UTC
Event time confidence
unknown
Location
Supermarkets in Belgium
Country
Belgium
Tags
supermarket cyberattack, refrigeration systems, industrial IoT, food supply chain, critical infrastructure, Belgium, Italy, Sweden, Finland, Estonia, Ireland, Luxembourg, Netherlands, Portugal, France, Danfoss, Coop, Carrefour, Ica, Intermarché, Delhaize, Colruyt, Musgrave, Mosqueteiros, EU Cyber Resilience Act, Traficom, APPLiA, remote access control, 4G network exposure
Signal
Submitted
Nov 3, 2026, 14:19 UTC
Networked refrigeration systems in supermarkets across nine European countries were remotely manipulated on 2 November 2026, forcing fridges and freezers into defrost or high-temperature modes, spoiling stock. Belgium was among the hardest hit, similar Danfoss-based systems were previously attacked in France, and the EU warns of a deliberate attempt to disrupt the food supply chain, though no perpetrator has been identified.
On 2 November 2026 a coordinated series of suspected cyberattacks targeted remote-controlled refrigeration systems in supermarkets and grocery stores across at least nine EU and European countries, forcing fridges and freezers into defrost or abnormally high-temperature modes and causing food spoilage. The affected countries confirmed so far are Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden, with a related earlier incident in France on 12 October 2026. The incidents primarily hit stores using network-connected refrigeration controllers supplied by Danish firm Danfoss or external refrigeration-service providers. In Italy, at least four Coop supermarkets in Sicily and one business in Tuscany were affected around 04:00 local time, targeting the Radenza Group's remote-control system for frozen sections; the issue was later resolved, and the government scheduled a cybersecurity meeting with intelligence services. Belgium appears among the hardest hit, with dozens of stores across Carrefour, Ikea (Mons outlet), Delhaize, Colruyt, and Intermarché reporting refrigeration failures; federal prosecutors opened an investigation, and refrigeration company Sabcobel said some of its not-yet-upgraded systems were compromised despite efforts begun after the October French attack. Ireland's Musgrave group reported a cyber incident impacting 13 Supervalu stores. In the Netherlands, a small number of corner shops experienced disruptions. Portugal's Mosqueteiros group confirmed cyber incidents at seven Intermarché stores, saying the attack appeared to target an external provider managing refrigeration systems. In Sweden, Coop reported six of about 800 stores were hit via outlets connected to older 4G-network-based systems; Ica reported a limited number of stores with refrigeration issues tied to an external control system from Danfoss, the same supplier hit in France. Finland's Kesko group detected irregular temperatures in a few smaller stores and was investigating possible network interference; the National Cyber Security Centre at Traficom said cyber interference could not be ruled out and noted that rapid exploitation of vulnerabilities has become typical. Estonia reported that at least one supermarket's hackers raised refrigeration temperatures to 50°C; the affected units were older Danfoss models similar to those in the French attack. EU Commissioner for Agriculture and Food Christophe Hansen said the bloc views the incidents as a deliberate attempt to disrupt the EU food supply chain and erode consumer confidence. No actor has claimed responsibility for either the November incidents or the October 12 French attack. Industry association APPLiA argued that cyber resilience of connected supermarket appliances requires both design-stage security and operational contingency (e.g., staff ability to manually check and secure cold-chain conditions) and tied the events to forthcoming implementation of the EU Cyber Resilience Act. Overall, the incidents illustrate a cross-border exploitation of industrial IoT vulnerabilities in the European food retail infrastructure, with potential hybrid-warfare implications but no attribution yet.
Confidence: High
The article repeatedly labels the events as cyberattacks or cyber incidents against network-connected refrigeration systems, details operational impacts (spoiled food, multiple chains and countries affected), and cites official investigations and statements framing them as deliberate disruption of the food supply chain. This clearly fits Cyber & Information Warfare under cyber attacks on critical infrastructure, and the focus is on the hostile incidents themselves, justifying HYBRID_SIGNAL an...
Source URL
https://euronews.com/2026/11/03/which-countries-in-europe-have-been-hit-by-supermarket-fridge-cyber-incidents
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "f34d0c70-28cc-4c7f-a607-eac7d46ba87d",
"url": "https://euronews.com/2026/11/03/which-countries-in-europe-have-been-hit-by-supermarket-fridge-cyber-incidents",
"source": "extension",
"status": "processed",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
"country": "Belgium",
"source_reliability": "B",
"info_credibility": "2",
"tags": [
"supermarket cyberattack",
"refrigeration systems",
"industrial IoT",
"food supply chain",
"critical infrastructure",
"Belgium",
"Italy",
"Sweden",
"Finland",
"Estonia",
"Ireland",
"Luxembourg",
"Netherlands",
"Portugal",
"France",
"Danfoss",
"Coop",
"Carrefour",
"Ica",
"Intermarché",
"Delhaize",
"Colruyt",
"Musgrave",
"Mosqueteiros",
"EU Cyber Resilience Act",
"Traficom",
"APPLiA",
"remote access control",
"4G network exposure"
],
"nodes": [],
"countries": [],
"where_text": "Cyberspace",
"headline": null,
"description": "On 2 November 2026 a coordinated series of suspected cyberattacks targeted remote-controlled refrigeration systems in supermarkets and grocery stores across at least nine EU and European countries, forcing fridges and freezers into defrost or abnormally high-temperature modes and causing food spoilage. The affected countries confirmed so far are Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden, with a related earlier incident in France on 12 October 2026. The incidents primarily hit stores using network-connected refrigeration controllers supplied by Danish firm Danfoss or external refrigeration-service providers. In Italy, at least four Coop supermarkets in Sicily and one business in Tuscany were affected around 04:00 local time, targeting the Radenza Group's remote-control system for frozen sections; the issue was later resolved, and the government scheduled a cybersecurity meeting with intelligence services. Belgium appears among the hardest hit, with dozens of stores across Carrefour, Ikea (Mons outlet), Delhaize, Colruyt, and Intermarché reporting refrigeration failures; federal prosecutors opened an investigation, and refrigeration company Sabcobel said some of its not-yet-upgraded systems were compromised despite efforts begun after the October French attack. Ireland's Musgrave group reported a cyber incident impacting 13 Supervalu stores. In the Netherlands, a small number of corner shops experienced disruptions. Portugal's Mosqueteiros group confirmed cyber incidents at seven Intermarché stores, saying the attack appeared to target an external provider managing refrigeration systems. In Sweden, Coop reported six of about 800 stores were hit via outlets connected to older 4G-network-based systems; Ica reported a limited number of stores with refrigeration issues tied to an external control system from Danfoss, the same supplier hit in France. Finland's Kesko group detected irregular temperatures in a few smaller stores and was investigating possible network interference; the National Cyber Security Centre at Traficom said cyber interference could not be ruled out and noted that rapid exploitation of vulnerabilities has become typical. Estonia reported that at least one supermarket's hackers raised refrigeration temperatures to 50°C; the affected units were older Danfoss models similar to those in the French attack. EU Commissioner for Agriculture and Food Christophe Hansen said the bloc views the incidents as a deliberate attempt to disrupt the EU food supply chain and erode consumer confidence. No actor has claimed responsibility for either the November incidents or the October 12 French attack. Industry association APPLiA argued that cyber resilience of connected supermarket appliances requires both design-stage security and operational contingency (e.g., staff ability to manually check and secure cold-chain conditions) and tied the events to forthcoming implementation of the EU Cyber Resilience Act. Overall, the incidents illustrate a cross-border exploitation of industrial IoT vulnerabilities in the European food retail infrastructure, with potential hybrid-warfare implications but no attribution yet.",
"summary_short": "Networked refrigeration systems in supermarkets across nine European countries were remotely manipulated on 2 November 2026, forcing fridges and freezers into defrost or high-temperature modes, spoiling stock. Belgium was among the hardest hit, similar Danfoss-based systems were previously attacked in France, and the EU warns of a deliberate attempt to disrupt the food supply chain, though no perpetrator has been identified.",
"summary_extended": null,
"actor_primary": null,
"target_primary": null,
"location_text": "Supermarkets in Belgium",
"location_region": null,
"location_coordinates_lat": 50.503887,
"location_coordinates_lon": 4.469936,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article repeatedly labels the events as cyberattacks or cyber incidents against network-connected refrigeration systems, details operational impacts (spoiled food, multiple chains and countries affected), and cites official investigations and statements framing them as deliberate disruption of the food supply chain. This clearly fits Cyber & Information Warfare under cyber attacks on critical infrastructure, and the focus is on the hostile incidents themselves, justifying HYBRID_SIGNAL an...",
"event_time_utc": "2026-11-02T03:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-11-03T14:19:00.038Z",
"updated_at": "2026-11-04T02:48:28.691Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
2
Event time
Nov 2, 2026, 03:00 UTC
Event time confidence
unknown
Location
Supermarkets in Belgium
Country
Belgium
Tags
supermarket cyberattack, refrigeration systems, industrial IoT, food supply chain, critical infrastructure, Belgium, Italy, Sweden, Finland, Estonia, Ireland, Luxembourg, Netherlands, Portugal, France, Danfoss, Coop, Carrefour, Ica, Intermarché, Delhaize, Colruyt, Musgrave, Mosqueteiros, EU Cyber Resilience Act, Traficom, APPLiA, remote access control, 4G network exposure