Massive Cyberattack on European Supermarkets Causes Widespread Food Spoilage

This attack underscores the vulnerabilities in critical infrastructure and the potential for widespread economic disruption.

• On October 11-12, 2026, a cyberattack compromised refrigeration controllers in approximately 700 supermarkets across Europe.
• Attackers exploited known vulnerabilities in legacy IoT devices, causing temperatures to rise to 50°C (122°F) and resulting in significant food spoilage.
• French authorities launched an investigation as affected retailers faced losses in the tens of millions of euros.

• Legacy systems are at risk: Many supermarkets used outdated firmware and failed to implement basic cybersecurity measures, making them easy targets.
• Prior warnings ignored: Security advisories had highlighted vulnerabilities in the affected refrigeration systems, yet many retailers did not act.
• Broader implications for IoT security: This incident reveals systemic risks in the supply chain, emphasizing the need for improved cyber hygiene across industries.

The 2026 European supermarket refrigeration cyberattack is a stark reminder of the vulnerabilities inherent in legacy Internet of Things (IoT) devices. On the night of October 11-12, unknown attackers exploited known flaws in refrigeration controllers from manufacturers like Danfoss, Dixell, and Copeland. These devices, which were often running outdated firmware and using predictable credentials, were left exposed to the public internet, allowing attackers to remotely activate defrost cycles.

As temperatures soared to 50°C (122°F), perishable goods spoiled, leading to significant financial losses for retailers and potential health risks for consumers. The attack affected around 700 supermarkets, primarily in France, but also in neighboring countries like Spain, Portugal, Poland, Germany, and Belgium. Major chains such as Intermarché and Carrefour were among those impacted, with losses estimated in the tens of millions of euros.

The incident highlights a critical failure in cybersecurity practices within the retail sector. Despite prior advisories from security researchers and organizations like CISA, many supermarkets prioritized cost over security, neglecting to implement basic protections such as Virtual Private Networks (VPNs) or timely firmware updates. This negligence not only led to immediate financial losses but also raised questions about the integrity of food supply chains across Europe.

In the aftermath, French authorities, including the Paris Prosecutor's Office and the French cybersecurity agency ANSSI, initiated investigations to identify the attackers and assess the full extent of the damage. Retailers were forced to discard compromised stock to mitigate health risks, further compounding their losses. Meanwhile, affected vendors acknowledged the vulnerabilities in their legacy products and began remediation efforts, but the damage to consumer trust and supply chain stability was already done.

This incident serves as a wake-up call for industries relying on IoT technology. As more devices become interconnected, the potential for cyberattacks increases, necessitating a shift in how organizations approach cybersecurity. The focus must move from reactive measures to proactive strategies that prioritize security in the design and maintenance of critical infrastructure.

• Retailers: Facing immediate financial losses and reputational damage.
• Consumers: Potentially experiencing food shortages and increased prices.
• Supply chain managers: Needing to reassess risk management strategies.
• Cybersecurity professionals: Tasked with improving defenses against similar attacks.

• Increased regulatory scrutiny: Expect governments to impose stricter cybersecurity regulations on critical infrastructure.
• Investment in cybersecurity: Companies may ramp up spending on security measures for legacy systems to prevent future incidents.
• Public awareness campaigns: Retailers might launch initiatives to educate consumers about food safety and supply chain integrity.