Overview
- The incidents began after a major mid‑October attack in France and escalated into a new wave on Nov. 2–3 that hit stores in Belgium, Sweden, Ireland, the Netherlands, Estonia, Finland, Italy, Portugal and Germany.
- Attackers remotely switched refrigeration units into defrost or heating modes, raising temperatures in some stores to as high as 50°C and forcing large-scale disposal of chilled and frozen food.
- Technical checks in Estonia linked at least one intrusion to an older, unpatched Danfoss controller, and reports say many affected sites used internet‑accessible, remotely managed control equipment.
- Authorities including ENISA, Europol and national police have opened coordinated investigations while urging operators to disconnect exposed controllers, apply firmware updates, use VPNs and enable multifactor access controls.
- Retailers and service firms mobilized technicians overnight to restore systems, insurers and regulators face pressure to tighten safeguards, and investigators have not yet confirmed who is responsible or the attackers' motive.