I recently wrote about the extraordinary cyberattack in France where hackers remotely manipulated supermarket refrigeration systems, raising temperatures to 50°C (122°F) and destroying enormous quantities of food. Now the same attacks have spread across Europe. Ireland, Sweden, Belgium, Luxembourg, the Netherlands, and Estonia have reported similar incidents. Someone sitting behind a computer can destroy thousands of dollars in meat, dairy, and frozen products without ever entering the building. They do not need to bomb a warehouse, blockade a port, or interrupt a supply route. They simply manipulate the temperature controls and wait for the food to spoil. We have entered an entirely different era of economic sabotage.
In France, approximately 150 Intermarché stores were affected, along with dozens of Carrefour, Monoprix, and other supermarket locations. Refrigeration systems that should have been preserving food at freezing temperatures were remotely instructed to heat their contents instead. Some systems reached 122°F, and fires were reported. Entire inventories had to be discarded. The damage was not confined to a single retailer, and investigators discovered that thousands of refrigeration controllers remained exposed to potential attacks through internet-connected systems. The French government launched an investigation, but the vulnerabilities were already widespread.
Now consider what happened on November 2. Ireland’s SuperValu reported that 13 of its 223 stores had been affected. Swedish retailers ICA and Coop experienced similar attacks, with freezers reaching 50°C overnight. Belgium’s Carrefour reported problems at 15 locations, while five Spar stores and dozens of Ahold Delhaize locations in Belgium and Luxembourg were also affected. Dutch retailers and a supermarket in Estonia reported further incidents. At one Swedish ICA location, the attack began around 2 AM and was discovered several hours later. Sales manager Engla Ingwall explained, “Everything is destroyed.” That is the reality of this new vulnerability. By the time employees arrive for work, the damage has already been done.
A Belgian butcher reported losing approximately €15,000 worth of meat after discovering that his refrigeration systems had been manipulated remotely. The equipment had been operating, but not in the manner its owners intended. At some Belgian locations, attackers reportedly activated defrost functions.
Why on earth have we connected virtually every essential function of society to the internet without ensuring that these systems can be secured? Refrigerators, heating systems, electricity networks, transportation equipment, water treatment facilities, and industrial machinery are increasingly operated through remote digital controls. Businesses embraced these technologies because they reduced labor costs, improved monitoring, and allowed equipment to be managed from centralized locations. The efficiency gains were real, but so were the vulnerabilities. We have created an economy in which a software weakness can produce physical destruction thousands of miles away from the person exploiting it.
Investigators examining the French incidents identified vulnerabilities involving refrigeration controllers manufactured by Danfoss and other suppliers. Danfoss said some affected equipment ran outdated firmware or had reached the end of its supported life. Security researchers also identified thousands of exposed interfaces. Reports indicated that some systems had weak or default passwords, while attackers could interfere with alarms before manipulating temperature settings.
The financial consequences extend beyond the immediate loss of spoiled food. Supermarkets operate on relatively thin profit margins. A retailer that loses its refrigerated inventory must dispose of the damaged products, clean the equipment, inspect the systems, replace the stock, and potentially close affected departments. Suppliers must arrange additional deliveries, transportation companies must adjust their schedules, and insurers may face claims. These costs eventually work their way through the supply chain. Businesses cannot absorb losses indefinitely without raising prices, cutting costs elsewhere, or accepting lower profitability. Consumers ultimately pay for many of these disruptions.
The absence of an identified perpetrator is another concern. No group has publicly claimed responsibility for the European attacks, and investigators have not established whether they were carried out by criminals, politically motivated hackers, or actors working on behalf of a government. Some cybersecurity specialists have pointed to the lack of ransom demands as a possible indication of sabotage rather than ordinary financial extortion. Others have cautioned that the attacks could have been carried out by individuals exploiting poorly secured systems without any geopolitical objective. Then you have the usuals accusing Russia and China without evidence.
Nevertheless, the strategic implications are impossible to ignore. Will this become commonplace? The disturbing answer is that repeated attacks are a credible risk unless the vulnerabilities are addressed. The incidents in France were followed within weeks by similar disruptions across several countries. Once criminals discover a method that works against commonly used equipment, the potential targets multiply. Manufacturers, retailers, and governments must therefore treat these incidents as warnings rather than isolated technical failures.
Modern conflict extends far beyond the battlefield. Economic disruption can be accomplished through sanctions, financial restrictions, supply-chain interference, and now attacks against the software controlling everyday infrastructure. But these vulnerabilities do not require a war to become dangerous. Criminal organizations and independent hackers can exploit many of the same weaknesses. The technology has created opportunities for sabotage that previous generations could scarcely have imagined.
The most frightening aspect is how little effort may be required to produce enormous damage once an exposed system has been compromised. Farmers spend months raising livestock and producing food. Companies invest in processing, refrigeration, transportation, and distribution. Consumers depend upon that entire chain functioning reliably. Yet a malicious change to a digital controller can destroy the final product within hours. All that productive labor and capital can be wasted without a single shot being fired.
Europe has now received two warnings in less than a month. The immediate losses are serious, but the larger question concerns the security of the infrastructure upon which modern civilization depends. We have built an extraordinarily efficient economy while creating new vulnerabilities that can be exploited remotely. If those weaknesses remain uncorrected, attacks against food refrigeration may become only one example of a much broader problem. The next major disruption may not involve a supermarket freezer. It could involve any essential system whose operators have surrendered physical control to inadequately protected software.
