FREEZERS TURNED FURNACES: Hackers strike supermarket fridges across Europe: news

Freezers Turned Furnaces: Hackers Strike Supermarket Fridges Across Europe in Unprecedented Cyberattack

A massive cyberattack targeting commercial refrigeration systems has struck hundreds of supermarkets across Europe, remotely sabotaging cold storage controls and turning cooling units into makeshift furnaces. Rather than executing traditional data theft or financial extortion, cybercriminals manipulated internet-connected thermostat infrastructure, causing storage temperatures to soar as high as 50°C (122°F). The incident has triggered localized fires, widespread food waste, and multi-million-euro operational disruptions, underscoring critical vulnerabilities in modern Internet of Things (IoT) supply chain infrastructure.

Critical Cyberattack Overview & Impact

• Targeted Infrastructure: Commercial cold storage networks and centralized climate-control software linked to retail outlets.

  The Economic Times

• Attack Method: Remote exploitation of outdated controller firmware, overriding cooling parameters to force continuous defrost cycles and extreme heating.

  The Economic Times

• Maximum Temperatures: Internal fridges and display units reached up to 50°C (122°F) for several hours.

  Indiatimes

• Affected Retailers: Widespread disruptions across major European supermarket brands, including Intermarché (over 150 branches impacted), Carrefour (around 80 stores), Coopérative U, Monoprix, and E. Leclerc.

  Indiatimes

• Key Damages: Thousands of tons of ruined perishable groceries (meat, seafood, produce, dairy), localized electrical fires from overheated compressors, and temporary store closures.

  Indiatimes

How the Hackers Compromised the Cold Chain

Supermarket operations increasingly rely on smart building management systems (BMS) and operational technology (OT) to centrally monitor food preservation temperatures. Investigators, led by France’s cybersecurity agency ANSSI and public prosecutors, identified security weaknesses stemming from legacy software and internet-facing digital thermostats.

Once attackers breached external access controls, they issued global override commands to the units. Instead of maintaining temperatures below 4°C (39°F) or frozen thresholds at -18°C (0°F), the systems were driven into emergency defrost modes, effectively transforming chillers into thermal ovens overnight.

Cybersecurity Implications for IoT and Food Security

This incident represents a severe escalation from virtual disruption to physical cyber-sabotage. Industry analysts warn that unprotected operational technology presents an urgent threat to national critical food supplies:

• Separation of Networks: Failure to air-gap OT networks from public internet routes leaves critical physical assets exposed to remote tampering.