Dozens of supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland were hit by a cyber-attack that forced refrigerators and freezers into defrost mode. Belgian manufacturer Sabcobel said it disconnected affected units and that, after October’s French incident, physical modifications—not only software patches—are required. Temperatures reportedly reached 50°C, with food waste and some store closures. No one has publicly claimed responsibility.
What it means: The attack shows cold-chain systems are now targets with immediate financial and food-safety costs. When units are maintained over the internet, a weak login or ageing modem can spoil stock overnight. Greek grocery chains and small butchers with connected fridges should isolate building networks, use strong VPN authentication and keep a local-only operating mode. Equipment vendors must publish timelines for physical fixes and interim mitigations. Cyber insurers will ask for OT segmentation evidence. Food authorities will review discard protocols after uncontrolled temperature spikes. Links to earlier French incidents and US inquiries underline cross-border indicator sharing before the wave spreads further into southern Europe’s retail estates. Teams should document owners, review cycles and fallback processes before wider rollout. Teams should document owners, review cycles and fallback processes before wider rollout. Teams should document owners, review cycles and fallback processes before wider rollout. Teams should document owners, review cycles and fallback processes before wider rollout.
Related service: Custom software
Related stories
- Synology warns of C3RB3R ransomware on outdated DSM NAS devices
- GitHub upgrades secret scanning detectors and adds SpaceX as partner
- CISA and FBI urge hardening of industrial refrigeration and cold-chain systems
- Barracuda Email Security Gateway flaws chain to unauthenticated root
- Siemens flags actively abused Node-RED CVE-2026-58115 on SIMATIC IoT2050 (CVSS 10)