--- title: Turning Up the Heat: Inside the Attacks on Europe’s... description: Attackers hijacked refrigeration controllers across Europe, forcing units into defrost mode and spoiling food at hundreds of supermarkets. A first wave hit... canonical: https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System | daily.dev og:description: Attackers hijacked refrigeration controllers across Europe, forcing units into defrost mode and spoiling food at hundreds of supermarkets. A first wave hit... og:url: https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u og:image: https://api.daily.dev/og/posts/yLId5QM8u.png og:image:alt: Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System **[Unit 42](https://daily.dev/sources/unit42)** · 4 min read · 0 upvotes · 0 comments ## Summary Attackers hijacked refrigeration controllers across Europe, forcing units into defrost mode and spoiling food at hundreds of supermarkets. A first wave hit approximately 700 French supermarkets on Oct. 11-12, 2026, and a second wave on Nov. 1-2 spread to at least 10 additional countries and 100-115 stores. Temperatures were pushed as high as 50°C (122°F), in some cases causing fires, and medical facility refrigeration was also affected, though there is no evidence that blood products were spoiled. Unit 42 found over 5,000 internet-exposed devices from manufacturers named in a CERT-FR advisory, and the count of exposed devices fell from 1,853 in early October to 316 by Nov. 6. Pro-Russian groups NoName057(16) and Z-Pentest claimed responsibility, unverified, and CISA issued a hardening advisory on Nov. 5. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the attacks on European supermarket refrigeration systems in late 2026? Threat actors gained unauthorized access to refrigeration controllers and set them to defrost mode, spoiling food at hundreds of supermarkets. A first wave hit about 700 French supermarkets on Oct. 11-12, 2026, and a second wave on Nov. 1-2 expanded to over 10 countries and 100-115 locations, with temperatures pushed as high as 50°C (122°F) and some units catching fire. _Security teams tracking OT and IoT attack trends follow incident writeups like this one on daily.dev._ ### Who claimed responsibility for the European refrigeration controller attacks? The pro-Russian hacktivist groups NoName057(16) and Z-Pentest claimed responsibility via Telegram posts on Nov. 3, 2026, though the claims remain unverified. CISA separately issued an advisory on Nov. 5, 2026 warning of potential exploitation through authentication bypass, arbitrary code injection, and weak configurations in refrigeration and cold chain monitoring systems. _Anyone assessing attribution claims in ICS incidents can keep up with developing threat intel on daily.dev._ ### How many internet-exposed refrigeration devices were found vulnerable in the European attacks? Over 5,000 internet-exposed devices manufactured by vendors named in a CERT-FR advisory were identified across Europe as of Nov. 5-6, 2026, though this doesn't confirm they ran vulnerable software. In France specifically, exposed device counts fell from 1,853 in early October to 558 in late October and 316 by Nov. 6, suggesting remediation after the attacks began. _Teams hardening exposed OT devices can track exposure trend data like this via daily.dev._ ## Similar posts on daily.dev - [Hackers disrupt refrigeration systems at European supermarkets](https://daily.dev/posts/hackers-disrupt-refrigeration-systems-at-european-supermarkets-ulsxqrblv) · BleepingComputer · 0 upvotes · 0 comments - [Supermarket freezers across Europe hit by second suspected cyber-attack](https://daily.dev/posts/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack-ndr1x5bol) · Hacker News · 0 upvotes · 0 comments - [Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up](https://daily.dev/posts/feds-warn-grocers-don-t-chill-on-cyber-defenses-as-freezer-hacking-spree-heats-up-x88plasmn) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System","url":"https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u"},"datePublished":"2026-11-06T21:24:10.379Z","dateModified":"2026-11-06T21:25:15.191Z","description":"Attackers hijacked refrigeration controllers across Europe, forcing units into defrost mode and spoiling food at hundreds of supermarkets. A first wave hit...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e74e2a2ffe460333deba7039d8afd386?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e74e2a2ffe460333deba7039d8afd386?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Unit 42","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Unit 42","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/5b55ca8d2ae04181939041fbc9d78160","url":"https://daily.dev/sources/unit42"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Unit 42","item":"https://daily.dev/sources/unit42"},{"@type":"ListItem","position":3,"name":"Turning Up the Heat: Inside the Attacks on Europe’s Refrigeration System"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/turning-up-the-heat-inside-the-attacks-on-europe-s-refrigeration-system-ylid5qm8u#faq","mainEntity":[{"@type":"Question","name":"What happened in the attacks on European supermarket refrigeration systems in late 2026?","acceptedAnswer":{"@type":"Answer","text":"Threat actors gained unauthorized access to refrigeration controllers and set them to defrost mode, spoiling food at hundreds of supermarkets. A first wave hit about 700 French supermarkets on Oct. 11-12, 2026, and a second wave on Nov. 1-2 expanded to over 10 countries and 100-115 locations, with temperatures pushed as high as 50°C (122°F) and some units catching fire. Security teams tracking OT and IoT attack trends follow incident writeups like this one on daily.dev."}},{"@type":"Question","name":"Who claimed responsibility for the European refrigeration controller attacks?","acceptedAnswer":{"@type":"Answer","text":"The pro-Russian hacktivist groups NoName057(16) and Z-Pentest claimed responsibility via Telegram posts on Nov. 3, 2026, though the claims remain unverified. CISA separately issued an advisory on Nov. 5, 2026 warning of potential exploitation through authentication bypass, arbitrary code injection, and weak configurations in refrigeration and cold chain monitoring systems. Anyone assessing attribution claims in ICS incidents can keep up with developing threat intel on daily.dev."}},{"@type":"Question","name":"How many internet-exposed refrigeration devices were found vulnerable in the European attacks?","acceptedAnswer":{"@type":"Answer","text":"Over 5,000 internet-exposed devices manufactured by vendors named in a CERT-FR advisory were identified across Europe as of Nov. 5-6, 2026, though this doesn't confirm they ran vulnerable software. In France specifically, exposed device counts fell from 1,853 in early October to 558 in late October and 316 by Nov. 6, suggesting remediation after the attacks began. Teams hardening exposed OT devices can track exposure trend data like this via daily.dev."}}]} ```