Refrigeration Cyberattacks and Suspected Incidents Expose Cold-Chain Security Risks

Attackers manipulated internet-connected refrigeration controls at French supermarkets, raising temperatures and spoiling food, while refrigeration failures elsewhere in Europe and at U.S. military commissaries prompted investigations into possible cyberattacks. At an Edeka supermarket in Reisbach, Germany, refrigeration systems reportedly reached 50°C overnight, forcing large quantities of food to be discarded; police have not confirmed a cyberattack. Similar incidents were reported in North Rhine-Westphalia, Belgium, Luxembourg, and Sweden, but links between the cases remain unknown. Earlier French attacks exploited vulnerabilities in older Danfoss controllers; use of the same method in the latest incidents is unconfirmed. Reuters reported that the Pentagon was investigating failures at at least six military commissaries as a suspected cyberattack, with cause and attribution unresolved.

Forescout Research–Vedere Labs identified 12,976 internet-exposed refrigeration service observations across 6,017 distinct public IP addresses in 99 countries and territories, highlighting a broad attack surface where digital compromise can cause physical losses. The Reisbach operator disconnected affected equipment from the internet, and Germany’s Federal Office for Information Security recommended removing direct internet access and strengthening remote-access security. Operators should restrict maintenance access, enforce least privilege, monitor temperature and configuration changes, and maintain independent engineering safeguards to limit physical harm if controllers are compromised.