Grocery refrigeration attacks cause fires and millions in losses
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Friday, October 16th, 2026.
Cyberattacks on commercial refrigeration systems spoiled food, caused some small fires, and drove losses into the millions for European grocers. More than 700 grocery and retail stores were reportedly affected in one night. France was at the center, with impacts also reported elsewhere in Europe.
The attackers manipulated controllers and extended defrost cycles, making dangerous heating look more like routine maintenance. Many affected units were outdated, and thousands of related controllers remained visible online.
For retailers, this creates safety, inventory, continuity, and financial consequences. Third-party access can also widen exposure when service providers manage equipment across many locations. Leaders should treat refrigeration and other building systems as business-critical infrastructure, not peripheral equipment. Defenders should inventory internet-facing controllers, restrict remote access, and verify firmware and support status.
The larger lesson is that cyber risk becomes physical risk when connected equipment controls real-world conditions. Organizations should immediately remove refrigeration controllers from direct internet exposure, restrict approved remote access, and update or replace unsupported systems.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
