Cyberattacks across Europe have taken an unexpected turn. After targeting financial institutions, government networks and major companies, hackers have now demonstrated how vulnerable another essential part of everyday life can be: supermarket refrigeration systems.
During October and November 2026, several European countries reported incidents involving connected refrigerators and freezers. In affected stores, temperature settings were allegedly manipulated remotely, causing refrigeration equipment to stop working correctly and, in some cases, reach temperatures as high as 50°C.
The consequences were immediate. Supermarkets were forced to remove and discard food, refrigeration systems required technical intervention, and retailers began reviewing the security of equipment used to manage their stores.
France experienced the first major incident on 11-12 October, when hundreds of supermarkets reported problems. A second wave followed between 1 and 2 November, affecting retailers in several European countries.
Italy was also affected. Four Coop-branded stores operated by the Radenza group in Sicily, three in Catania and one in Palermo, reported an attack against their remote refrigeration management systems.
The incidents prompted an emergency meeting at Palazzo Chigi, involving senior government officials, the National Cybersecurity Agency and intelligence representatives.
Italian authorities described the national impact as limited and said that no cases of public health risk linked to thawed food had emerged from the checks conducted at that time.
Nevertheless, the incidents have raised important questions about the security of connected industrial equipment, the protection of food supply chains and the growing consequences of cyberattacks against physical infrastructure.
France: Hundreds of supermarkets affected by the first major incident
The story began in France during the night of 11-12 October 2026.
Several major supermarket operators reported unusual behaviour in their refrigeration systems. Freezers and refrigerated displays experienced sudden temperature increases, with some units reportedly reaching 50°C.
The incident affected retailers including Carrefour, Intermarché and Cooperative U.
According to Reuters, Carrefour reported that around 80 stores had been affected, while Intermarché said approximately 150 of its supermarkets had experienced problems. Monoprix also reported incidents involving part of its store network.
The consequences were substantial. Products that could no longer be considered safely stored had to be discarded, creating financial losses and considerable food waste.
French authorities launched an investigation, while the National Cybersecurity Agency, ANSSI, was instructed to examine the incident.
One important technical element emerged during the initial investigations: some refrigeration controllers were running outdated software.
Danish manufacturer Danfoss confirmed that certain affected systems were using obsolete firmware and reiterated its recommendations to customers to update supported equipment and migrate away from legacy systems.
However, the existence of outdated equipment does not automatically establish which specific vulnerability was exploited in every incident.
The investigation must distinguish between confirmed technical weaknesses, suspected methods of access and the evidence required to identify those responsible.
A second wave spreads across Europe in November
Less than three weeks after the French incident, another series of refrigeration failures was reported between 1 and 2 November.
The incidents affected supermarkets and other commercial food retailers in several countries, including Belgium, Sweden, Luxembourg, Ireland, Estonia, the Netherlands and Finland.
Belgium was among the countries reporting numerous affected locations.
Retailers including Delhaize, Carrefour, Intermarché and Spar experienced problems with refrigeration equipment. An IKEA store in Mons also reported an incident involving its cooling systems.
Carrefour Belgium said that approximately 15 of its 700 stores had been affected, mainly involving individual refrigeration units rather than entire supermarkets.
In Sweden, both ICA and Coop reported problems. Some refrigeration units reportedly reached temperatures as high as 50°C, forcing employees to remove food from affected displays and freezers.
Ireland's Musgrave Group confirmed that 13 SuperValu supermarkets had been affected by a cyber incident.
Estonia also reported an incident involving a supermarket refrigeration installation, while Dutch businesses experienced similar disruptions.
The available reports do not establish that every incident followed precisely the same technical pattern. Some retailers explicitly confirmed a cyberattack, while others initially described an IT incident or unexplained refrigeration failure.
Nevertheless, the timing and similarities between several incidents have raised concerns about a wider campaign targeting connected refrigeration equipment.
The European Union has responded by increasing cooperation between national cybersecurity authorities and relevant European institutions.
Italy: Four Coop stores affected in Sicily
Italy was directly involved in the second wave of incidents.
On 2 November, reports emerged that several Coop-branded supermarkets in Sicily had experienced attacks against their refrigeration control systems.
The affected locations were operated by the Radenza group.
According to information provided by the company, at least four stores were involved: three in Catania and one in Palermo.
The incident affected the remote management system used to control refrigerated displays and frozen-food counters.
Danilo Radenza, the group's chief executive, confirmed that the company had identified an attack against its remote control infrastructure.
The manipulation of temperature settings caused problems with food preservation, requiring affected products to be assessed and removed where necessary.
The company began examining the damage and activated procedures to investigate the incident.
Italy's Postal Police are working to establish the origin of the attack and determine whether it is connected to the incidents reported elsewhere in Europe.
It is important to clarify that this was not a nationwide attack against every Coop supermarket in Italy. The confirmed reports concerned specific stores operated by the Radenza group in Sicily.
The distinction matters because early headlines can create the impression that an entire national retail network has been compromised, when the available evidence concerns a limited number of locations.
Emergency meeting at Palazzo Chigi
The growing number of incidents prompted the Italian government to organise an emergency meeting on 3 November.
The meeting was coordinated by Alfredo Mantovano, Undersecretary to the Prime Minister, and involved Agriculture Minister Francesco Lollobrigida, representatives of the National Cybersecurity Agency and the heads of Italy's intelligence services.
The objective was to assess the extent of the incidents, coordinate investigations and determine whether additional preventive measures were necessary.
Interior Minister Matteo Piantedosi acknowledged the seriousness of the situation, noting that similar incidents had occurred in several European countries.
He also referred to the possibility of a coordinated initiative, while stressing that investigations were still underway.
Following the meeting, Palazzo Chigi stated that the impact in Italy was limited.
The government also reported that no cases of public health risk attributable to food thawing had emerged from the checks conducted at that stage.
Authorities nevertheless maintained a high level of alert and continued working with the companies involved.
Federdistribuzione also said it was monitoring the situation closely, adding that its medium-sized and large member companies had not reported widespread problems across their distribution networks.
Why are supermarket refrigerators connected to the internet?
One of the most frequently asked questions concerns the reason why supermarket refrigeration systems need an internet connection in the first place.
The answer lies in the way modern commercial refrigeration works.
A large supermarket does not necessarily operate hundreds of completely independent refrigerators.
Instead, many stores use centralised refrigeration infrastructure capable of managing multiple display cabinets, freezers and cooling systems.
These installations monitor several operational parameters, including:
Temperature levels across refrigeration units.
Compressor performance.
Pressure and system conditions.
Automatic defrost cycles.
Energy consumption.
Technical alarms and maintenance notifications.
Remote connectivity allows technicians to monitor equipment without travelling to every individual store.
It also helps retailers identify problems earlier, organise maintenance and manage multiple locations more efficiently.
However, remote management creates an additional security requirement.
If control interfaces are directly exposed to the internet, protected by weak authentication or running outdated software, they may become vulnerable to unauthorised access.
The risks can be particularly serious when a centralised management platform controls multiple devices.
A compromise affecting a shared control system could potentially have consequences across several locations rather than a single refrigerator.
How can hackers make a freezer heat up?
The process is linked to the automatic functions used by industrial refrigeration systems.
Freezers and cooling installations periodically need to remove ice that accumulates on their evaporator components.
This process is known as defrosting.
Depending on the equipment, it can involve electrical heating elements or other mechanisms that temporarily interrupt normal cooling operations.
The control system determines when these cycles take place and manages their duration and operating parameters.
If an unauthorised person gains access to the management system, it may become possible to interfere with those settings.
Abnormal commands could cause a refrigeration unit to stop cooling properly, activate inappropriate defrost cycles or experience significant temperature changes.
The result can be serious food-storage problems without any need to physically destroy the refrigeration equipment.
This is what makes the incidents particularly concerning: a digital intrusion can directly affect the operation of physical machinery.
Danfoss and outdated refrigeration controllers
Danfoss, a Danish manufacturer of industrial and commercial refrigeration technologies, has become an important name in the investigation.
During the French incident, authorities and technical specialists identified concerns involving refrigeration controllers running outdated firmware.
The manufacturer acknowledged that some affected systems were using obsolete software and reiterated the importance of installing security updates on supported equipment.
Research published in August 2026 by cybersecurity company Claroty had also identified vulnerabilities affecting a family of Danfoss AK-SM 800A controllers.
Danfoss subsequently issued software updates addressing reported security weaknesses.
However, there is an important distinction between identifying vulnerabilities in a product and proving that attackers exploited those exact weaknesses during every reported incident.
The available evidence does not establish that a single vulnerability explains all the attacks across Europe.
Different retailers may use different controllers, software versions and remote management arrangements.
The broader problem is that industrial equipment can remain operational for many years even when its digital security protections become outdated.
Replacing a controller or updating an industrial installation can be expensive and technically complicated.
Yet leaving unsupported systems connected to the internet can create significant risks for businesses.
Who is behind the attacks?
The identity of the attackers remains one of the biggest unanswered questions.
As of 8 November 2026, no definitive public attribution has established who organised the incidents.
No reliable public claim of responsibility has identified a specific group, and authorities have not conclusively linked the attacks to a foreign government.
The absence of publicly reported ransom demands in some of the incidents has encouraged speculation that the objective may not have been traditional financial extortion.
One possibility being discussed is sabotage intended to cause economic disruption and undermine public confidence.
This has led to references to hybrid warfare, a term used to describe operations combining cyberattacks, information manipulation and other forms of pressure against a country's institutions and infrastructure.
Supermarkets are particularly visible targets because they provide an essential everyday service.
An attack affecting food refrigeration can produce immediate economic damage and attract significant public attention.
However, these circumstances are not sufficient to establish the involvement of a state-sponsored actor.
Speculation about Russian involvement, sometimes mentioned in media commentary, should not be presented as an established fact.
Investigators still need to determine whether the incidents originated from a coordinated operation, several independent groups or opportunistic exploitation of similar security weaknesses.
What the Italian cybersecurity agency is recommending
Italy's National Cybersecurity Agency has issued urgent guidance for organisations operating in food distribution, industrial refrigeration and related maintenance services.
The recommendations focus on protecting the systems used to manage and monitor refrigeration installations.
The main measures include:
Checking whether control and remote maintenance interfaces are accessible directly from the public internet.
Isolating industrial equipment from ordinary corporate IT networks.
Strengthening remote access through protected connections.
Enabling multi-factor authentication.
Reviewing privileged accounts and administrative access.
Updating equipment and replacing devices that are no longer supported by their manufacturers.
The agency has also emphasised the importance of protecting the wider infrastructure rather than concentrating only on individual refrigeration units.
A further security notice published on 4 November extended the warning to organisations using industrial remote-control systems more generally.
The message is clear: connected industrial equipment must be treated as part of an organisation's cybersecurity environment.
The European Union steps up coordination
The scale of the incidents has prompted a coordinated European response.
On 4 November, the European Commission, ENISA and other relevant European cybersecurity organisations issued a joint statement concerning incidents involving commercial refrigeration systems.
The statement confirmed that cybersecurity incidents affecting commercial refrigeration equipment and similar devices had been recorded in several EU Member States since 11 October.
Following the second wave on 1-2 November, the European institutions called on affected organisations to take immediate steps to reduce exposure to vulnerable systems.
National authorities are investigating the incidents, sharing information and coordinating their responses.
The European approach is important because retail companies, equipment suppliers and maintenance providers frequently operate across national borders.
A vulnerability affecting equipment or services used in multiple countries could create a wider security problem.
Should consumers be worried about food safety?
The most immediate concern for shoppers is whether food affected by refrigeration failures remains safe to consume.
The answer depends on the products involved and the conditions to which they were exposed.
Fresh and frozen foods must be stored under appropriate temperature conditions.
If those conditions are not maintained, products may deteriorate and become unsuitable for sale.
Simply restoring the refrigerator to its normal temperature does not automatically make affected food safe again.
Retailers must assess the products concerned and follow the applicable food-safety procedures.
Where necessary, affected products must be removed from sale and discarded.
In Italy, Palazzo Chigi reported that the checks conducted at the time had not identified cases of public health risk linked to thawed food.
That statement should not be interpreted as a blanket guarantee covering every store or every product. It describes the situation reported by the authorities at that particular stage.
For consumers, there is no reason for general panic, but normal food-safety precautions and official notices from retailers remain important.
Could the same thing happen to a refrigerator at home?
The supermarket incidents have also raised concerns about smart home appliances.
Technically, any internet-connected device can contain security weaknesses.
However, a domestic refrigerator is not the same as a large supermarket refrigeration installation.
Commercial systems often use centralised controllers and remote management platforms that can operate multiple cooling units.
A household appliance normally has a different architecture and a more limited operational role.
This does not mean that smart appliances are completely risk-free.
Devices with default passwords, outdated software or poorly protected remote access may become vulnerable to unauthorised use.
Consumers can reduce these risks by following a few basic precautions:
Replace default passwords.
Use different passwords for different services.
Enable two-factor authentication where available.
Install security updates.
Disable remote access functions that are not needed.
Choose manufacturers that provide long-term security support.
The most realistic concerns are not necessarily that a domestic refrigerator will suddenly behave like an industrial freezer during these attacks.
They also include compromised accounts, privacy risks and the possibility of connected devices being misused without their owners' knowledge.
A warning about the security of physical infrastructure
The attacks on supermarket refrigeration systems highlight a broader change in cybersecurity.
Digital networks increasingly control physical equipment that is essential to everyday life.
Industrial refrigeration, energy management, building systems and other connected installations depend on software, remote access and centralised monitoring.
When those systems are compromised, the consequences can extend beyond data theft or temporary computer outages.
They can affect food preservation, business operations and essential services.
The supermarket incidents have demonstrated how a weakness in a remote management system can produce tangible consequences across several locations.
For retailers, the priority must now be to review outdated equipment, strengthen access controls and ensure that industrial systems are properly separated from ordinary corporate networks.
For governments, the challenge is to improve coordination and make sure that vulnerabilities affecting essential commercial infrastructure are identified before they can be exploited.
The investigations are still ongoing, and the identity of those responsible remains unknown.
What is already clear, however, is that cybersecurity is no longer just about protecting computers and personal information.
It is also about protecting the physical systems that keep essential services running.
Related articles
Revolut Cyberattack: Data Theft and the Security Concerns https://www.commentalanotizia.com/2026/09/revolut-attacco-hacker-furto-dati-pec.html
The Fideuram Scam: Artificial Intelligence and the €95 Million Case https://www.commentalanotizia.com/2026/09/truffa-fideuram-intelligenza-artificiale-95-milioni.html
The OpenAI AI Agent and the Medicare Case in Australia https://www.commentalanotizia.com/2026/09/agente-ia-openai-medicare-australia.html
Anthropic Introduces New Rules on Insults and AI Behaviour https://www.commentalanotizia.com/2026/10/anthropic-claude-nuove-regole-insulti-intelligenza-artificiale.html
The Florida Claude Case: Threats, Privacy and Legal Questions https://www.commentalanotizia.com/2026/10/claude-arrestata-florida-minacce-privacy-intelligenza-artificiale.html
Artificial Intelligence and Politics: Governments and Chatbots https://www.commentalanotizia.com/2026/10/intelligenza-artificiale-politica-governi-chatbot.html
Instinct AI and Privacy: The Risks of On-Screen Personal Data https://www.commentalanotizia.com/2026/09/instinct-ai-privacy-schermo-dati-personali.html
👉 Want to read the full original article? Read it on Commenta La Notizia:👇
https://www.commentalanotizia.com/2026/11/attacchi-hacker-supermercati-europa-italia-frigoriferi.html
The original article is in Italian. You can use your browser’s automatic translation feature if needed.
Subscribe and vote for all articles 👇
https://www.publish0x.com/goldweb?a=xkazKWYYbJ
💬 Join us on Telegram to comment and follow all the insights
👉 https://t.me/CommentaLaNotizia
© 2026 CommentalaNotizia.com - All rights reserved
Official sources used under fair use
📺 Follow Commenta La Notizia for deeper insights, global analysis, and fearless discussions about the issues that shape our world — from politics and technology to society and the hidden forces behind the headlines.
⚠️ Legal Notice This article and the related multimedia content are the exclusive property of the author. Copying, reproduction, distribution, or modification in any form or on any platform is prohibited without written permission.
Copyright © CondividiSulWeb – YouTube Commenta La Notizia
👤 Author: @condividisulweb
✍️ Commenta La Notizia is my editorial project created to provide clear and engaging insights into news, events, and major current issues.
Every article, video, and short is made with a clear goal: not only to inform, but also to give context, reflection points, and analysis to understand not just what happens, but especially why it happens.
With Commenta La Notizia I want to build a reliable and accessible space where everyone can get informed, understand, and join the discussion.
🌐 If you want to stay updated, you can follow me here.
💬 Your opinion matters! Every piece of news is a chance to discuss: share your thoughts and make your voice heard.
📰 Comment, share, stay informed.
🙏 Thank you for reading: your time and your opinion are the true value
https://www.commentalanotizia.com/
