{"id":822234,"date":"2026-11-03T00:28:09","date_gmt":"2026-11-03T00:28:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/822234\/"},"modified":"2026-11-03T00:28:09","modified_gmt":"2026-11-03T00:28:09","slug":"who-is-hacking-europes-supermarket-fridges-and-freezers-and-why-cybercrime","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/822234\/","title":{"rendered":"Who is hacking Europe\u2019s supermarket fridges and freezers, and why? | Cybercrime"},"content":{"rendered":"

Supermarket fridges and freezers in seven European countries have malfunctioned<\/a>, their thermostats remotely cranked up in some cases to 50C (122F).<\/p>\n

The EU has condemned what it said was \u201ca deliberate attempt to disrupt our food supply chain and undermine consumers\u2019 confidence in it\u201d.<\/p>\n

Which supermarkets were affected and what does it mean?\u00a0<\/p>\n

The attack hit fridges in Belgian branches of Carrefour, Intermarch\u00e9 and Ikea, Coop and ICA in Sweden, Delhaize in Luxembourg, Kesko in Finland, SuperValu in Ireland and shops in Estonia.<\/p>\n

It appeared to be a reprise of attacks three weeks ago<\/a> when French retailers had to ditch huge amounts of food when their fridges suddenly overheated as a result of anonymous hackers seizing control of their internet-exposed appliance management software.<\/p>\n

Something similar may have happened in the US in early August when a series of mysterious fridge malfunctions hit commissaries at least six military bases. The Pentagon is investigating a suspected hack.<\/p>\n

Workers at a branch of ICA in Sj\u00f6bo, southern Sweden, dispose of spoiled food. Photograph: Johan Nilsson\/EPA<\/p>\n

This is feared to signal a new front in cyber-attack and hacking tactics. Fridges are not unique in having their controls exposed to hackers. Many ovens, washing machines, dishwashers and central heating systems are linked to the internet to allow remote access and automated control.\u00a0<\/p>\n

Who is doing it?<\/p>\n

No politically motivated \u201chacktivist\u201d group has claimed responsibility and neither has a ransomware gang exploited the vulnerability to demand the supermarkets pay \u2013 which in any event would be difficult because the damage is already done when their fridges overheat.\u00a0<\/p>\n

\u201cThe two most plausible attribution scenarios for me are some kind of state-based signalling and demonstration of capability or some kind of lone-wolf hacker that is conducting these attacks for their own personal reasons,\u201d said Rafe Pilling, the senior director for threat intelligence at the cybersecurity company Sophos.\u00a0<\/p>\n

The state-linked actor theory seems most likely, in part because of the obvious psychological impact on large populations of seeing food stripped from shelves. North Korea is believed to have been<\/a> behind last week\u2019s Binance cryptocurrency heist, but in this case hackers linked to Russia and China are also likely to be in the frame.<\/p>\n

Western intelligence chiefs say<\/a> Moscow is waging a campaign of sabotage in Europe<\/a> that takes many different forms and is likely to intensify in the coming months.<\/p>\n

A worker at a branch of ICA in Sj\u00f6bo, southern Sweden disposes of spoiled food. Photograph: Johan Nilsson\/TT\/Shutterstock<\/p>\n

Discerning the culprit is made harder by the relative simplicity of the hack. No malware was needed, which means there is no trace of a weapon at the scene of the crime. Pilling compared it to \u201cwearing rubber gloves and messing with the switches\u201d.<\/p>\n

How is it possible?<\/p>\n

The software that manages commercial fridges is connected to the internet, which means lines of code can be left vulnerable to hackers. Unlike desktop or mobile devices, on which users and IT managers are often alerted to the need to install updates that contain patches to repair constantly emerging vulnerabilities, the software in items such as fridges can be left for long periods without updates.\u00a0\u00a0<\/p>\n

Nick Jackson, the director of cyber-operations at the cybersecurity company Bitdefender, said one reason companies might move slowly to install patches is they can take time to run, which leaves periods when machinery needs to be offline \u2013 an obvious problem for food retailers. But he said a simpler explanation could be that the people running the fridges are not aware of the problem, \u201cdon\u2019t think about that and it\u2019s not top of their agenda\u201d.<\/p>\n

In Monday\u2019s wave of incidents, Coop in Sweden said some of its fridges were linked to a 4G mobile network that made them more exposed. ICA said its system was provided by Danfoss, the Danish company that had problems in France.\u00a0<\/p>\n

What can shops do to defend themselves?<\/p>\n

The simple answer is to patch their software systems. According to the Belgian refrigerator group Sabcobel, the impact of Monday\u2019s hack could have been far worse if they had not started patching fridges after the 12 October attack in France.<\/p>\n

In the UK, which has not yet been affected, retailers are \u201ccurrently working with the National Cyber Security Centre(NSCC) to ensure their fridges and freezers are secure as possible against potential attacks\u201d said Graham Wynn, the assistant director of regulatory affairs at the British Retail Consortium.<\/p>\n

Why have British supermarkets not been hit yet?<\/p>\n

Internet-exposed refrigeration systems are most popular in countries including France, Italy, Greece and Belgium, according to the cybersecurity company Forescout.<\/p>\n

Daniel dos Santos, its vice president of research, said: \u201cWhen we checked the data for these exposed systems online of supermarkets, the UK is not in the top 10.\u201d He said the risk was not negligible, but \u201cI wouldn\u2019t say it\u2019s super-high right now for the UK specifically\u201d.<\/p>\n

A spokesperson for the NCSC said it was \u201cworking with its international partners and industry to fully understand details of an incident\u201d.<\/p>\n","protected":false},"excerpt":{"rendered":"Supermarket fridges and freezers in seven European countries have malfunctioned, their thermostats remotely cranked up in some cases…\n","protected":false},"author":2,"featured_media":822235,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-822234","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/822234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=822234"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/822234\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/822235"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=822234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=822234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=822234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}