Supermarket Fridge Hacking in Europe: Who Is Behind It and Why 2026

Supermarket fridge hacking has emerged as a alarming new front in cyber-attacks after thermostats in seven European countries were remotely cranked up, in some cases to 50C (122F), causing food spoilage and supply chain disruption. The EU condemned the incidents as “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it.”

Which Supermarkets Were Affected by the Fridge Hacking?

The attacks hit fridges in Belgian branches of Carrefour, Intermarché and Ikea, as well as Coop and ICA in Sweden, Delhaize in Luxembourg, Kesko in Finland, SupaValu in Ireland and shops in Estonia. The scale suggests a coordinated effort rather than isolated incidents.

This appears to be a reprise of attacks three weeks earlier when French retailers had to discard huge amounts of food after their fridges suddenly overheated. In both cases, anonymous hackers seized control of internet-exposed appliance management software.

Something similar may have happened in the US in early August when mysterious fridge malfunctions hit commissaries at at least six military bases. The Pentagon is investigating a suspected hack.

Why Are Internet-Connected Fridges Vulnerable?

Fridges are not unique in having their controls exposed to hackers. Many ovens, washing machines, dishwashers and central heating systems are linked to the internet to allow remote access and automated control. This connectivity brings convenience but also opens doors for malicious actors.

The problem is compounded by weak security measures. Often, these devices use default passwords, unencrypted communication or outdated software, making them easy targets for anyone with basic hacking skills.

The recent attacks exploited internet-exposed appliance management software, which likely lacked proper authentication or encryption. Once inside, hackers could manipulate temperature settings, causing food to spoil and creating operational chaos.

Who Is Behind the Attacks and What Is the Motive?

No politically motivated “hacktivist” group has claimed responsibility, and no ransomware gang has stepped forward to demand payment. This ambiguity makes it difficult to pinpoint the perpetrators.

Possible motives include testing capabilities, causing disruption for its own sake, or even a state-sponsored operation aimed at destabilizing European food supply chains. The EU’s strong condemnation suggests they view it as a serious threat.

Another possibility is that this is a proof-of-concept by cybercriminals planning to sell the exploit to others. The lack of a ransom demand could indicate that the goal was not financial but rather to demonstrate vulnerability.

What Does This Mean for the Food Supply Chain?

The attacks highlight the fragility of modern food supply chains, which rely heavily on connected technology. A coordinated hack could cause widespread shortages and panic buying, as seen during the pandemic.

Retailers are now scrambling to secure their systems. Some are likely disabling remote access features or adding two-factor authentication. However, retrofitting security into legacy systems is costly and time-consuming.

Consumers may face higher prices as supermarkets invest in cybersecurity and absorb losses from spoiled goods. Trust in the safety of the food supply chain could also erode if attacks continue.

What Should Businesses and Consumers Watch For?

Businesses should audit their connected devices, change default credentials, and segment networks to limit exposure. Regular security assessments and employee training are also crucial.

Consumers can stay informed about recalls and disruptions, but they have limited ability to protect themselves beyond supporting retailers that prioritize security.

Regulators may step in with stricter cybersecurity standards for IoT devices. The EU has already been working on the Cyber Resilience Act, which aims to impose security requirements on connected products.

• Supermarket fridges in seven European countries were hacked, with thermostats set to 50C.
• No group has claimed responsibility, motive remains unclear.
• Internet-exposed appliance management software was the likely entry point.
• Similar incidents occurred in France and possibly the US.
• Businesses must secure IoT devices to prevent future attacks.

Comparing IoT Security Incidents

The table shows that IoT vulnerabilities have been exploited before, but targeting food supply chains is a newer tactic.

How Can the Industry Respond?

The industry needs a multi-pronged approach: manufacturers must build security into devices from the start, retailers must implement robust network security, and governments must enforce standards.

Collaboration across sectors is essential. Information sharing about threats and best practices can help prevent future attacks.

Consumers also have a role by demanding secure products and staying vigilant about unusual device behavior.

As we have seen with European supermarket freezers hit by a second suspected cyber-attack, the threat is evolving rapidly. Retailers must act now to protect their operations and reputation.

The rise of smart appliances, such as those discussed in smart washing machines and fridges in 2026, brings convenience but also new risks. Security must be a priority from design to deployment.

Innovations like AI shopping trolleys in a Lancashire supermarket trial show how technology is transforming retail. However, each new connected device adds another potential entry point for hackers.

Countries like Australia are also grappling with outdated technology vulnerable to AI hacking attacks, highlighting a global need for modernization and security.

Europe’s absence in the AI safety debate may be a factor in its vulnerability. Greater engagement in global discussions could help prevent future incidents.