A reported new wave of attacks against internet-connected refrigeration controllers has affected more than 100 stores in Europe, according to SecurityWeek. The incidents reportedly involved attackers tampering with internet-exposed systems used to manage supermarket refrigeration, with affected locations said to include stores in Belgium, Sweden and Ireland.

While the available report is limited, the incident is a clear reminder that connected operational technology, such as refrigeration, HVAC, access control and other building systems, can create business risk when exposed directly to the internet.

What happened

SecurityWeek reported that attackers resumed targeting supermarket refrigeration controllers and that more than 100 European stores were hit. The report says the affected systems were internet-exposed, which suggests that remote access to these controllers may have created an entry point for tampering.

Based on the source, the confirmed point is the reported disruption of refrigeration-related systems at stores in multiple European countries. The source excerpt does not provide detailed technical evidence on the attack method, the brands of equipment involved, whether credentials were compromised, or whether the incidents involved a broader ransomware or extortion campaign.

Why it matters for European businesses

For retailers, food businesses and other operators of temperature-sensitive environments, refrigeration is not just a facilities issue. It is directly linked to stock protection, food safety, store continuity and brand trust. Even a limited disruption can create losses through spoiled goods, emergency maintenance, downtime or temporary store closures.

The wider business lesson goes beyond supermarkets. Many organisations now rely on connected devices outside traditional IT environments, including sensors, smart controllers, industrial systems and third-party maintenance platforms. These systems are often part of operational technology environments, where security controls may be weaker than in standard office IT.

For European companies, this matters in several ways:

• Operational disruption: attacks on physical systems can interrupt trading and service delivery.
• Safety and compliance risk: failures in refrigeration or environmental controls may create food, pharmaceutical or storage compliance issues.
• Supplier and third-party exposure: remote maintenance arrangements can expand the attack surface.
• Cybersecurity governance: internet-exposed devices remain a common and avoidable weakness.

The incident is also relevant in the context of increasing European attention on cyber resilience, including expectations around risk management, asset visibility and the protection of operational systems in essential and important sectors.

Who may be affected

• Supermarkets and food retailers using connected refrigeration, freezer monitoring or building management systems.
• E-commerce and logistics businesses that rely on cold-chain storage or temperature-controlled warehousing.
• Hospitality and food service operators with remotely managed cooling equipment.
• Pharmaceutical, laboratory and healthcare organisations where environmental controls are essential for product integrity.
• IT and facilities teams responsible for building systems, IoT devices and vendor-managed infrastructure.

What companies should consider

Where businesses operate connected refrigeration or similar building systems, the immediate priority is to check whether any controllers or management interfaces are directly reachable from the public internet.

• Identify exposed systems: maintain an inventory of refrigeration, HVAC, IoT and other operational technology assets.
• Restrict remote access: avoid direct internet exposure where possible and review how vendors connect for maintenance.
• Strengthen authentication: ensure strong passwords, unique credentials and, where supported, multi-factor authentication.
• Segment networks: separate operational systems from core business IT and e-commerce environments.
• Review logging and alerting: confirm that unexpected configuration changes or access attempts can be detected quickly.
• Coordinate with suppliers: ask equipment vendors and service providers what security controls, update processes and incident procedures are in place.
• Prepare business continuity plans: define how stores or sites would respond if cooling systems were tampered with or taken offline.

For SMEs, this is also a reminder that cybersecurity is not limited to laptops, email and cloud software. Internet-connected physical systems can have immediate commercial impact, especially where downtime affects goods, safety or customer operations.