# Europe's Freezer Cyberattacks Reach UK Food Suppliers, Exposing a Cold-Chain Weak Point

> MKNIRALO — Industry — EUROPE | FOOD SYSTEMS & CYBERSECURITY

- Published: 2026-11-04
- Estimated reading time: 6 minutes
- Byline: Ellis — Industry & Engineering Observer
- Byline disclosure: Ellis is a house editorial byline maintained by MKNIRALO, not a claim of an independently verified individual. It does not imply engineering licensure, personal site inspections or professional credentials.
- Author profile: https://mkniralo.com/authors/ellis/
- Tags: Europe, Cybersecurity, Cold Chain, Food Supply, Industrial Control Systems, United Kingdom
- Cover image: https://mkniralo.com/images/europe-freezer-cyberattacks-uk-food-suppliers-2026.svg

Attacks that disrupted supermarket refrigeration across Europe have also affected British meat suppliers. The confirmed damage is uneven, and investigators have not identified who is responsible.

A freezer can fail without breaking down. In the latest European refrigeration cyber incidents, the cooling machinery at affected businesses was still part of a functioning food system, but remote controls had been manipulated. Reports on November 3 brought the story beyond supermarket aisles: a British industry association said three meat suppliers had been affected. None reported losing meat. That distinction matters. The incidents expose a genuine vulnerability in food businesses while falling well short of proof that Europe's entire cold chain has shut down.

## From supermarket freezers to food suppliers

Refrigeration problems were reported at food retailers in several European countries on November 2, following similar incidents in France in October. Operators described remotely altered temperatures, forced defrost cycles and chilled or frozen goods being removed from sale. At some stores the losses were real, but the consequences were not uniform across the affected businesses.

In Ireland, Musgrave said refrigeration systems at 13 SuperValu stores were affected and that products were withdrawn as a precaution. It later said the incident was resolved and restocking was under way. Delhaize reported affected outlets in Belgium and Luxembourg but said its distribution centers and deliveries were operating normally.

The development for the wider food chain came in Britain. The Association of Independent Meat Suppliers told The Record that three of its members had been affected through Copeland XWEB supervisory controllers. Its spokesperson said none had lost meat. This is evidence of supplier-level exposure, not evidence of a nationwide breakdown in food deliveries.

Sources:
- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News)
- [Supermarket freezers in several European countries hit by apparent cyberattacks](https://apnews.com/article/europe-supermarkets-freezers-cyberattacks-a8ea5b30d67da47957769f29101fe686) — Associated Press

## Why the suppliers' experience changes the story

A retailer's freezer is the most visible part of a much longer temperature-controlled journey. Processors, wholesalers and shops may all rely on connected monitoring equipment. When similar controls are installed across different kinds of businesses, the same class of security weakness can expose organizations that do not share an owner or a central computer network.

The meat suppliers' trade association described its affected members as collateral victims because they used the same software. The Record also reported that a British fruit-and-vegetable wholesaler experienced an attempted manipulation of its cooling controls and intervened before stock spoiled. Those accounts do not establish that the attacker deliberately selected food manufacturers or wholesalers as a separate campaign.

This makes the central risk more specific than the phrase 'food supply chain attack' can suggest: vulnerable refrigeration-control equipment may be deployed at many points in food distribution. It does not establish that transport networks, warehouses, processors and supermarkets were all simultaneously disabled.

Sources:
- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News)
- [European supermarkets face spoiled food losses after fridge cyberattacks](https://apnews.com/article/supermarkets-europe-internet-cyberattack-food-fridges-hacked-b6abfab3f5cdd65c19476b9032eb7a9d) — Associated Press

## The control systems and the known warning

France's national cyber incident-response service, CERT-FR, issued an alert on October 12 and updated it on October 16. It said it was aware of numerous compromises involving Danfoss AK-SM and AK-SC refrigeration controllers and Copeland/Dixell XWEB equipment. Its warning singled out management interfaces exposed to the public internet as a serious security concern.

The French alert recommended removing affected controls from direct public-internet access, reviewing their configurations, and restoring remote access only through protected connections. It also called for appropriate firmware updates and changes to default credentials. Resetting a compromised device alone, the agency cautioned, does not eliminate a still-exposed weakness.

Copeland identified a vulnerability in discontinued XWEB controllers, according to AP reporting. None of those statements proves that every November incident used an identical exploit. Investigators have not publicly established a complete technical chain connecting all affected locations.

Sources:
- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News)
- [Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (CERTFR-2026-ALE-012)](https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012) — CERT-FR / ANSSI

## Measured losses, not a proven continental shortage

Some retailers disposed of food after refrigeration settings were altered. A Swedish store reported controls set to 50 degrees Celsius, while Carrefour said 15 of its roughly 700 Belgian stores had been affected. These are reported store-level effects, not a reliable measure of Europe-wide losses.

The results were different at the British meat suppliers. According to their trade association, the three affected members did not lose meat. Britain's National Cyber Security Centre said it was assisting affected organizations and described the national impact at that stage as minimal.

Neither the available operator accounts nor the official statements demonstrate a general collapse in European food supply, a lasting shortage or a quantified continent-wide financial loss. Those outcomes should not be inferred from dramatic temperature readings or from the number of countries reporting incidents.

Sources:
- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News)
- [Supermarket freezers in several European countries hit by apparent cyberattacks](https://apnews.com/article/europe-supermarkets-freezers-cyberattacks-a8ea5b30d67da47957769f29101fe686) — Associated Press
- [European supermarkets face spoiled food losses after fridge cyberattacks](https://apnews.com/article/supermarkets-europe-internet-cyberattack-food-fridges-hacked-b6abfab3f5cdd65c19476b9032eb7a9d) — Associated Press
- [At least 11 European countries snared in freezer cyberattacks](https://www.afp.com/en/least-11-european-countries-snared-freezer-cyberattacks) — Agence France-Presse (AFP)

## Who carried out the attacks remains unknown

No identified group had claimed responsibility as of the latest reports reviewed for this article, and authorities had not publicly established an attribution. The European Commission called for coordination across national authorities, but its concern about a broader threat is not the same as a finding that one organization planned every incident.

The cyber techniques described in public reporting involved familiar weaknesses in connected industrial controls. The Associated Press quoted cybersecurity specialists and British officials saying there was no evidence that artificial intelligence was used in these attacks. A speculative claim about state sponsorship or an AI-directed operation would go beyond the available record.

It is also too early to turn the latest incidents into a numerical trend. They show that multiple businesses were affected during a short period, not how frequently this class of attack will occur in the coming months.

Sources:
- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News)
- [European supermarkets face spoiled food losses after fridge cyberattacks](https://apnews.com/article/supermarkets-europe-internet-cyberattack-food-fridges-hacked-b6abfab3f5cdd65c19476b9032eb7a9d) — Associated Press
- [At least 11 European countries snared in freezer cyberattacks](https://www.afp.com/en/least-11-european-countries-snared-freezer-cyberattacks) — Agence France-Presse (AFP)

## The practical lesson is about physical operations

In a November 3 speech, NCSC chief executive Richard Horne pointed to the disruption of refrigeration units across Europe as an example of the insecure technology underpinning physical processes. The issue is not confined to traditional office IT: machines controlling temperatures, manufacturing and other essential operations can have remote-management interfaces too.

The French CERT-FR guidance points to concrete priorities for operators: identify exposed supervisory controllers, remove direct internet access, use protected remote connections and apply supported updates and configuration changes. Operators also need to consider how changes to connectivity affect legitimate monitoring and maintenance.

The latest attacks have revealed a cross-sector vulnerability and prompted urgent defensive work. Whether that work prevents further incidents remains to be seen. What is already clear is that protecting a food business now includes protecting the digital controls that keep its products cold.

Sources:
- [Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (CERTFR-2026-ALE-012)](https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012) — CERT-FR / ANSSI
- [Richard Horne's speech at the NCSC Annual Review 2026 launch](https://www.ncsc.gov.uk/speech/richard-hornes-speech-at-the-ncsc-annual-review-2026-launch) — UK National Cyber Security Centre

## About this article

This article reflects the public sources available on the publication and update dates shown above. For developing stories, follow the linked source pages for subsequent statements or decisions.

## Sources and further reading

- [British businesses caught in Europe-wide supermarket fridge attacks](https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks) — The Record (Recorded Future News) (published 2026-11-03) (accessed 2026-11-04)
- [Supermarket freezers in several European countries hit by apparent cyberattacks](https://apnews.com/article/europe-supermarkets-freezers-cyberattacks-a8ea5b30d67da47957769f29101fe686) — Associated Press (published 2026-11-02) (accessed 2026-11-04)
- [Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (CERTFR-2026-ALE-012)](https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012) — CERT-FR / ANSSI (published 2026-10-12) (accessed 2026-11-04)
- [Richard Horne's speech at the NCSC Annual Review 2026 launch](https://www.ncsc.gov.uk/speech/richard-hornes-speech-at-the-ncsc-annual-review-2026-launch) — UK National Cyber Security Centre (published 2026-11-03) (accessed 2026-11-04)
- [European supermarkets face spoiled food losses after fridge cyberattacks](https://apnews.com/article/supermarkets-europe-internet-cyberattack-food-fridges-hacked-b6abfab3f5cdd65c19476b9032eb7a9d) — Associated Press (published 2026-11-03) (accessed 2026-11-04)
- [At least 11 European countries snared in freezer cyberattacks](https://www.afp.com/en/least-11-european-countries-snared-freezer-cyberattacks) — Agence France-Presse (AFP) (published 2026-11-03) (accessed 2026-11-04)