European Grocery Cyberattack Highlights Weak OT/IoT Device Controls
A coordinated cyberattack affected hundreds of supermarkets in Europe, causing freezer units to heat to about 50°C instead of cooling. The incident destroyed perishable goods, produced smoke, and prompted fire department responses in multiple countries. The article uses the event to argue that organizations need stronger operational technology and IoT device hygiene.
The weekend attack struck refrigeration systems at major French supermarket chains, with effects reported in Spain, Portugal, Germany, Belgium, and Poland. Attackers found internet-exposed Danfoss controllers running outdated firmware, gained admin access, and triggered automatic defrost cycles. This made freezers heat to about 50°C, destroying perishables, creating smoke, and prompting fire responses. Shodan reportedly showed more than 4,500 exposed Danfoss systems, many at European retailers.
The case reflects a broader OT/IoT weakness: maintenance features and legacy devices can become entry points when reachable online. It also shows digital intrusions can cause immediate physical and business disruption, not only data loss.
Shoppers, store employees, suppliers, and emergency responders could feel the effects of similar incidents. Spoiled perishables may lead to temporary shortages, higher prices, or reduced product variety, while smoke and heating equipment could raise safety concerns for workers and customers. Retailers might face repair costs, lost revenue, and reputational damage. More broadly, the event may prompt businesses and communities to question how much everyday infrastructure depends on poorly secured internet-connected devices, though the full social consequences remain uncertain.