Overview
- A new wave of attacks hit supermarket cooling systems across multiple countries on Monday, Nov. 2, with operators reporting units forced into defrost or heating modes and temperatures in some cases rising to about 50°C.
- Germany reported its first confirmed incidents this week in Bavaria, North Rhine‑Westphalia and Lower Saxony, and national police cyber units are coordinating with investigators in other affected states.
- Technical traces point to internet‑exposed, older refrigeration controllers being exploited—reports cite unpatched Danfoss and other legacy devices—prompting authorities to tell operators to disconnect devices from the internet and apply security updates.
- Major retailers and service providers have been affected, including Delhaize, Carrefour, ICA, Coop and Intermarché, with dozens of stores reporting spoiled chilled and frozen goods and local teams mobilizing technicians overnight.
- No group has claimed responsibility and motives remain unclear, but EU officials call the incidents a deliberate attempt to disrupt the food chain and experts warn the episode will drive tighter rules, vendor reporting and stronger remote‑access controls.