Supermarkets in several European countries were reportedly hit by a new wave of cyberattacks that changed refrigeration control settings overnight, warming fridges and freezers and forcing some stores to remove chilled and frozen products from sale. The incident is notable because it appears to affect operational technology rather than only office IT, creating immediate business disruption in physical stores.

What happened

According to the source report, attackers remotely changed settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries during the night leading into November 2. No retail chain reportedly said that more than several dozen stores were affected, but some locations had to discard food or pull products from shelves.

The report links the incident to refrigeration control systems made by Danfoss, a Danish manufacturer. Based on the information provided, it is clear that store operations were disrupted, but the full technical cause, the attack path and the total number of affected sites were not yet publicly confirmed in the source text.

Why it matters for European businesses

This is a strong example of how cyber risk extends beyond laptops, email and business software. Many retailers, food businesses, warehouses and facility operators rely on connected control systems to manage temperature, energy use, alarms and maintenance. If attackers can alter those settings remotely, the result can be direct product loss, store downtime, health and safety concerns and reputational damage.

For European businesses, the practical issue is that operational technology and IoT-style infrastructure are often managed separately from core IT, or by third-party suppliers. That can leave gaps in visibility, access control, patching and incident response. In sectors handling food, pharmaceuticals or temperature-sensitive goods, even a short disruption can have financial and compliance consequences.

The incident also underlines a broader business risk: digital infrastructure in physical locations is now part of cybersecurity exposure. Building controls, refrigeration, HVAC, access systems and industrial devices can become attack targets when remotely accessible tools are not sufficiently protected.

Who may be affected

• Supermarkets and food retailers using network-connected refrigeration and store-control systems
• E-commerce and grocery fulfilment operators with chilled storage and distribution facilities
• Warehouses and logistics companies handling temperature-sensitive goods
• Hospitality, food service and convenience chains that depend on remote monitoring of cooling equipment
• IT and facilities teams responsible for connected operational systems and third-party vendor access

What companies should consider

• Review remote access to refrigeration, HVAC, building management and other operational systems. Remove unnecessary internet exposure and restrict supplier access to controlled, monitored channels.
• Separate operational systems from office IT where possible. Network segmentation can reduce the chance that a compromise spreads between business systems and physical control systems.
• Audit vendor dependencies and clarify who manages authentication, patching, logging and emergency response for connected equipment.
• Check alerting and fail-safe procedures so that abnormal temperature changes are detected quickly and escalated to local staff.
• Prepare an incident response plan for operational disruptions, including product quarantine, manual checks, store communications and coordination with suppliers.
• Assess backup operating procedures for temperature-sensitive goods, especially in retail, food distribution and regulated storage environments.

For SMEs and multi-site operators, the immediate lesson is practical: connected physical systems should be treated as part of core cybersecurity risk, not only as maintenance infrastructure. Businesses with internet-connected cooling, energy or building controls may want to validate access paths and supplier security arrangements as a priority.