Supermarket Fridges Hacked: A Wake-Up Call for Global Cybersecurity

Hackers have twice targeted supermarket refrigeration systems across Europe in less than a month, causing fires and spoiling millions of euros worth of food. The initial attacks on October 11 and 12 saw temperatures in approximately 700 French stores' units raised as high as 50C (122F). A subsequent wave of suspected cyberattacks on November 2 impacted supermarkets and food businesses in at least nine European countries, including Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, and Sweden.

France has attributed the first attack to Shahid Kaveh, a cyberunit linked to Iran’s Islamic Revolutionary Guard Corps (IRGC), labeling it the first large-scale sabotage cyberattack on French soil. The perpetrators of the second wave remain unidentified. These incidents have amplified concerns about the vulnerability of internet-connected equipment, ranging from industrial machinery to everyday household appliances.

Supermarket refrigeration units are typically managed via a central control panel connected to the internet, allowing for remote access by contractors. Similarly, home smart refrigerators connect through Wi-Fi, apps, or cloud services. Attackers reportedly utilized Shodan, a search engine for internet-connected devices, to locate these systems. According to Vincent Strubel, head of France’s National Cybersecurity Agency (ANSSI), the breaches exploited basic security failures, including direct internet exposure without additional protection, weak or default passwords, and the use of outdated models lacking security updates.

Once inside, hackers can disable units, increase temperatures, or steal account information. In the French incidents, attackers exploited the units' own defrost functions. A poorly secured fridge can also serve as an entry point to other devices on the same network, such as laptops or smart locks. Strubel warned the French Senate that the healthcare sector employs similar equipment for storing vaccines and hazardous materials in research laboratories and pharmacies, highlighting a significant risk.

The potential for hacking extends to virtually any internet-connected device. Globally, there are an estimated 21 billion short-range connected devices and 5.4 billion long-range ones. In the US, households now average about 18 connected devices, a near doubling over the past decade. Routers, being constantly online, are prime targets. In April, the UK’s National Cyber Security Centre (NCSC) issued a warning about hackers linked to Russia’s GRU military intelligence hijacking routers to redirect users to fake websites via DNS tampering, aiming to steal credentials.

Smart TVs are also susceptible; research revealed that over a third of apps on LG and Samsung smart TVs could allow unauthorized access to a household's internet connection. Robot vacuums present further risks, with a programmer reportedly demonstrating control over thousands of DJI Romo robot vacuums using a PlayStation 5 controller, gaining access to live camera feeds, audio, and home floor plans.

The same vulnerabilities that affect refrigerators can impact critical services like power plants, water supplies, banks, and hospitals, many of which rely on internet-accessible industrial computers. US agencies have warned of increased attacks by Iran-affiliated hackers on these systems. In July, a cyberattack in Minnesota targeted over 30 community water systems, suspected to be by Iran-aligned hackers. That same month, a cyberattack attributed to Iran-linked hackers disrupted a small British power plant for four days, marking the first successful attack on UK energy infrastructure. The US Cybersecurity and Infrastructure Security Agency (CISA) identifies critical infrastructure sectors vulnerable to such attacks.

Financial institutions are also targets. In late September and early October, hackers stole personal data from at least seven South Korean financial firms, including Yegaram Savings Bank and Shinhan Bank, affecting approximately 68,000 customers. The attack reportedly used ARTEX, an open-source AI tool developed in China, and potentially Claude Code, an AI coding tool by Anthropic.

Politically motivated cyberattacks are on the rise. The European Repository of Cyber Incidents (EuRepoC) logged 4,932 major incidents between January 2000 and November 2026, with a significant increase in recent years, peaking at 795 in 2024. State institutions, critical infrastructure (including health, finance, and energy), and defense firms are among the most targeted sectors. While EuRepoC tracks politically significant attacks, numerous other scams and attacks target individuals and companies.

Cybersecurity experts emphasize that as infrastructure becomes more digitized, the risk of disruption from cyberattacks increases. However, they also note that the world relies on effective cybersecurity. The UK’s NCSC advises disabling unused features like remote camera access. In the event of a major attack on critical infrastructure, individual actions may be limited. The UK’s Be Ready campaign suggests households maintain a three-day supply of essential items like water, food, medicine, cash, and torches as a precautionary measure against potential disruptions.