Remote fridge attacks spoil stock across more than 100 stores
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Wednesday, November 4th, 2026.
Remote manipulation of refrigeration controls disrupted more than 100 European stores and forced some businesses to discard food. Attackers reportedly placed refrigerators and freezers into defrost mode, with some units set as high as 50°C. The incidents followed an earlier wave that affected about 700 supermarkets in France. No attacker has claimed responsibility, and investigators haven’t established whether the two waves are connected.
For leaders, this is a clear example of a cyber incident producing immediate physical and financial consequences. An exposed control interface can lead directly to lost inventory, safety concerns and business interruption. For defenders, the affected equipment included legacy or unpatched controllers. One account said every freezer confirmed as affected had a management interface reachable from the internet.
Some systems may also require physical modification rather than a software update alone. The broader lesson is that ordinary connected equipment can become an operational attack surface when remote administration is exposed without adequate protection.
Organizations should remove refrigeration controllers from direct internet access and verify patches, credentials, network segmentation and physical fallback procedures.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
