A cyberattack hit refrigeration controllers used across hundreds of European supermarkets, triggering defrost cycles that left perishable goods unrefrigerated and, in many cases, spoiled. The incident underscores a growing risk facing operational technology (OT) systems that sit outside the traditional IT security perimeter but whose failure has immediate, physical, and costly consequences.

Refrigeration controllers of this kind are typically used to manage temperature settings, defrost cycles, and alerts across networked cooling units in retail environments. Because these systems are often centrally managed to allow remote monitoring and adjustment across many store locations, a single point of compromise can cascade across an entire retail chain’s cold storage infrastructure simultaneously, which appears to be what happened here.

Why This Matters

Refrigeration and other building management systems have historically received less security scrutiny than core IT networks, despite controlling equipment that is essential to business continuity and public health. Food retailers depend on these controllers to keep perishable inventory within safe temperature thresholds; when that control is hijacked or disrupted, the result is not just downtime but direct financial loss from spoiled stock and potential food safety violations.

This incident fits a broader pattern of attacks against industrial and operational technology, where attackers increasingly recognize that disrupting physical processes, rather than stealing data, can cause immediate and visible damage. Retail and logistics operators relying on networked OT equipment, including HVAC, refrigeration, and building automation systems, should treat these devices as critical assets requiring the same rigor applied to core IT infrastructure.

What Organizations Should Do

  • Inventory all networked refrigeration and building management controllers and verify how they are remotely accessed and managed.
  • Segment OT networks from corporate IT networks to limit lateral movement in the event of a compromise.
  • Ensure remote management interfaces for industrial controllers require strong authentication and are not exposed directly to the internet.
  • Establish monitoring and alerting for anomalous commands sent to refrigeration or climate control systems.
  • Develop incident response plans that account for physical consequences, including spoiled inventory and supply chain disruption.

Further details on the attackers, the entry point used, and the scope of affected retailers have not yet been disclosed.