Cyberattacks on Supermarket Refrigerators Spread Across Europe, Spoiling Food at Dozens of Stores

A second wave of cyberattacks targeting supermarket refrigerators has hit Belgium, Ireland, Luxembourg, and Sweden in November 2026, causing freezer units to raise temperatures and spoil food at dozens of stores across the continent.

Supermarket chains Ahold Delhaize and Colruyt confirmed the attacks overnight. A Belgian company operating Delhaize’s systems told Reuters that hackers had changed refrigerator settings to defrost, forcing stores to discard large quantities of food that had thawed or become otherwise unfit for sale.

The attacks follow a similar incident last month in France, where refrigerator hacks caused food spoilage at hundreds of supermarkets by deliberately raising unit temperatures. Security researchers identified the source of both waves as internet-connected refrigerators manufactured by Danish company Danfoss, which is no longer providing security updates for the affected units. Security firm Claroty had warned in August 2026 that those refrigerator units were vulnerable to remote hacks and outages.

Separately, U.S. Department of Defense officials are reportedly investigating whether freezer units on military bases were hacked by Iran-backed hackers. Iranian hackers were also blamed for cyberattacks targeting U.S. water providers earlier in 2026.

The incidents highlight how cyberattacks on connected devices can disrupt physical infrastructure and supply chains. A comparable situation unfolded in 2025, when a cyberattack on U.S. food distributor UNFI led to food shortages and empty shelves at grocery stores across the United States. The European refrigerator attacks suggest that outdated or unpatched internet-connected hardware in commercial settings may present significant vulnerabilities to the broader food supply chain.