Supermarket refrigeration units across six European nations were compromised overnight, forcing the units to enter a defrost cycle that could raise internal temperatures to 158 °F (70 °C). The coordinated attack, reported by Protos, is the second major fridge hack this year and threatens to generate losses measured in millions of euros as per statements from industry officials.

Geographic Scope and Immediate Impact

According to the report, the compromised units were located in Belgium, Luxembourg, Sweden, Ireland, Estonia and the Netherlands. The malicious code instructed the appliances to heat up, causing perishable goods to spoil and potentially disrupting supply chains for major retailers. The incident follows a similar breach in France last month, where Intermarché’s CEO Thierry Cotillard warned that the damage could reach "tens of millions of euros nationwide in a single day."

Possible Motives and Suspected Actors

Cybersecurity partner Gérôme Billois of Wavestone told The Guardian that the perpetrators are unlikely to be seeking cryptocurrency ransoms. Instead, he suggested the motive is to sow chaos and undermine public confidence in governmental stability. Billois identified two state actors historically linked to such destabilisation campaigns: Iran and Russia, while also noting that teenage hacktivists could be responsible. The pattern of targeting physical infrastructure mirrors an August attack that disabled freezers at six U.S. military bases, prompting Pentagon involvement alongside French authorities.

Response and Ongoing Investigation

European law enforcement agencies have opened joint investigations, with the Pentagon coordinating with French officials to trace the source of the malicious firmware. Retailers are being urged to isolate affected units and conduct forensic analyses to prevent further spread. No ransom demands have been reported, reinforcing the view that the attack’s primary aim is disruption rather than monetary gain.

What to Watch Next

Analysts will monitor whether additional retail or critical‑infrastructure sectors become targets, as well as any public attribution of the attacks to nation‑state actors. Updates from cybersecurity firms and law‑enforcement briefings will be crucial in assessing the broader risk landscape for physical‑asset cyber threats across Europe.