Overnight on 1–2 November 2026, supermarket refrigeration systems across at least seven European countries were compromised. Temperatures in fridges and freezers at dozens of stores were remotely driven up—some to 50°C or higher. Chilled and frozen food spoiled. Stores in Belgium (Delhaize, Carrefour, Spar and others), Luxembourg, the Netherlands, Sweden (ICA and Coop), Ireland (SuperValu), Estonia and Finland had to throw out stock. This followed a similar wave in France in mid-October that hit hundreds of outlets.

No group has claimed responsibility. There has been no public ransom demand. The immediate impact is lost inventory, operational disruption, and a clear signal about how fragile parts of the modern food cold chain have become.

 

The Real Money Behind “No Internal Monitoring”

One of the strongest drivers for connecting these systems is pure cost-cutting.

Manual temperature checks (staff walking the store 2–4 times a day and logging results) cost a typical store €2,000–€4,000 per year in labour alone. A real UK chain with 800 stores calculated almost £250,000 a year just for those checks and collating the records.

True 24/7 internal monitoring is far more expensive. Continuous coverage requires shift work — typically 4–5 full-time people — at European employment costs of €35,000–€55,000 per person. Even a centralised internal team for a multi-hundred-store chain quickly runs into hundreds of thousands or millions of euros annually.

By contrast, modern remote/IoT monitoring usually costs only €15–50 per store per month in subscriptions, plus a one-time hardware outlay of a few hundred to a couple of thousand euros. Outsourcing the monitoring function (sometimes to lower-cost countries) or relying on fully automated alerts is dramatically cheaper than keeping internal technicians or IT staff watching the systems around the clock.

That is the logic that put the freezers on the internet in the first place: it looks leaner and more efficient on the balance sheet. The attacks have now shown the other side of that equation.

Who Is Doing This—and Who Benefits From Destroying Food?

Criminals driven purely by money are an imperfect fit. Once the food is spoiled, there is little left to unlock or negotiate over. Ransomware gangs usually leave a note. None appeared here.

The pattern fits state-linked or state-directed sabotage more cleanly — hybrid or “grey-zone” activity aimed at psychological and economic disruption: empty shelves, aggregate losses in the millions, eroded public confidence, and a low-cost demonstration of reach. Attribution remains difficult, but the absence of claims and the focus on critical everyday infrastructure point away from ordinary profit-seeking criminals.

Give the Unfrozen Food to Citizens for Free

While the technical and security lessons are clear, there is also a practical and ethical point that should not be ignored. Large quantities of food were rendered unfrozen or temperature-abused. Wherever food safety rules still allow it — or where the product can be safely redirected — that food should be given free to citizens rather than simply thrown into bins or sent for destruction.

In a period when many households are under pressure and governments have been telling people to keep emergency stocks, discarding usable food while people struggle is the worst possible outcome. Retailers, local authorities and food banks should have rapid protocols ready for exactly these situations: immediate safety assessment, and free distribution of anything that can still be safely consumed or used. Transparency about what is discarded and why would also help maintain public trust.

Why Does This Keep Happening in November—Right as Winter Starts?

Several European governments had recently urged citizens to keep 72 hours (or more) of food and water at home, explicitly naming cyberattacks among the risks. Then the cold chain itself was hit. Winter amplifies the impact and the media attention. A summer version of the same attack would still spoil food, but the psychological resonance would almost certainly be lower. Real vulnerabilities were exposed. Real food was destroyed. At the same time, the coincidence with preparedness messaging and the onset of colder weather inevitably fuels the sense that we are entering another seasonal cycle of elevated threat narratives.

What Business Leaders Should Take From This

1. Connectivity is a choice, not a default.
2. The labour savings from remote monitoring are real (thousands of euros per store per year), but so is the new risk surface.
3. Cost-cutting that ignores resilience is expensive when it fails.
4. Have clear, fast protocols so that compromised but still-safe food goes to citizens for free instead of the bin.
5. Design for local fail-safe operation first; remote access second.

Efficiency and resilience are not opposites, but they require deliberate design. The freezers that failed this week did so in part because convenience and cost reduction outran security considerations. That trade-off is now on full display across European grocery aisles — exactly as winter arrives. The organisations that treat this as a temporary inconvenience rather than a structural warning will face the same lesson again, only more expensively. And the food that was lost should not simply disappear into waste streams while citizens are being told to prepare for shortages.