Observed Signal · Nov 2, 2026 · Security Incident · Source: Trending Topics (DACH/CEE Innovation & Tech) · Impact: 3/5 · Sentiment: Negative

Hackers Overheat Supermarket Freezers in Sweden, Belgium

Executive Signal Summary

Hackers remotely manipulated refrigeration controllers in supermarkets across Sweden and Belgium, raising freezer temperatures to as high as 55°C. Swedish retailers Ica and Coop confirmed affected stores, while Belgian chains Delhaize and Carrefour reported 40 and 15 affected locations respectively. This attack marks a second wave following a similar incident in France in October that affected up to 700 supermarkets. The vulnerability stems from outdated Danfoss controllers (AK-SM 800, AK-SC 355) that are past end-of-life and lack security updates, leaving systems exposed via the internet. Damage is estimated in the millions of euros. Authorities in France are investigating, but no perpetrators have been identified. The incident underscores the urgent need for firmware updates and enhanced security for critical infrastructure.

Polaris7 AgentPolaris7 Strategic Assessment
High Confidence

Cybersecurity attack on critical retail infrastructure highlights systemic vulnerabilities in IoT devices, relevant to AdTech due to potential disruption of retail media networks and supply chains.

SIGNAL RADAR

Track Ahold Delhaize Signals & Market Shifts in Real-Time

Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your Polaris7 workspace to monitor these entities.

Start Monitoring
Verified primary sourcesAutomated briefingsInstant watchlist setup

Key Takeaways & Evidence Grounding

  • Hackers remotely raised freezer temperatures to up to 55°C in supermarket chains Ica, Coop, Delhaize, and Carrefour in Sweden and Belgium.
  • This is the second wave of attacks, following an October incident affecting up to 700 French supermarkets.
  • The vulnerability lies in outdated Danfoss refrigeration controllers (AK-SM 800, AK-SC 355), which are end-of-life and lack security updates.
  • The attacks were executed by exploiting internet-exposed, unpatched systems, with damage estimates in the millions of euros.
  • Authorities in France are investigating, but no perpetrators have been identified yet.

Connected Companies & Entities

2 Entities mapped

“Parent company of Delhaize, confirmed an IT incident affecting refrigeration systems in several stores.”

“Belgian retail chain, part of Carrefour Belgium, reported 15 affected locations.”

Ontology Mapping & Concepts

Cybersecurity, Threat Detection & Identity Protection#Refrigeration controller exploitation
Primary Source Grounding & Direct Attribution
Direct Origin Attribution
Primary Reporting: Trending Topics (DACH/CEE Innovation & Tech)•Published: Nov 2, 2026
Original Coverage Title: “Hackers Crank Supermarket Freezers in Sweden and Belgium Up to 55 Degrees”

Related Market Signals & Shifts

Recent verified developments and strategic activity across this market segment.

CybersecurityNov 3, 2026

Cyberattacks on Supermarket Refrigeration Hit German Stores

Cyberattacks on supermarket refrigeration systems have caused significant food spoilage and financial losses across Germany and Europe. In Lower Saxony, a Lilienthal supermarket discarded goods worth over €360,000 after temperatures reached 30°C, with similar incidents in Diepholz and North Rhine-Westphalia (Wuppertal, Wetter, Münsterland). The Central Criminal Investigation Office Oldenburg confirmed investigations on November 3, 2026. Attacks have been reported in Belgium, Sweden, Ireland, Luxembourg, Estonia, Finland, and the Netherlands, involving remote setting of systems to defrost mode. These incidents follow a major October attack on French retail chains via a service provider. German Digital Minister Karsten Wildberger urged stronger cybersecurity for digital building and operations tech, while Schwarz Group CEO Christian Müller warned of AI-powered threats. The Schwarz Group (Lidl, Kaufland) confirmed it was not affected. The exact damage and possible links between attacks remain unclear.

Read assessment
SecurityOct 12, 2026

Cyberattack disrupts cooling systems at French supermarket chains

A series of cyberattacks on smart refrigerators manufactured by Danfoss has disrupted supermarket chains across Europe. The first wave on October 14, 2026, affected ~350 stores in France (Carrefour, Monoprix, Intermarché, Leclerc, Coopérative U) and Dutch chains (Albert Heijn, Etos, Gall & Gall), exploiting vulnerabilities in Danfoss AK-SM 800A controllers. Hackers activated defrost mode, raising temperatures to 50°C, causing food spoilage and technical damage. Initial damages in France are estimated at €300,000, with economic losses in the millions. A second wave hit Belgium, Ireland, Luxembourg, and Sweden, confirmed by Ahold Delhaize and Colruyt, affecting dozens of stores. Danfoss released a firmware fix, citing outdated systems, while Claroty had previously warned about remote hack risks. Attacks are ongoing, with no group claiming responsibility; investigations are underway, including potential Iran-linked attacks on military freezers.

Read assessment
CybersecurityNov 5, 2026

U.S. warns of cyber threat to industrial refrigeration

The U.S. government issued a joint statement warning of an ongoing cyber threat targeting industrial refrigeration units, following mass hacks affecting supermarkets, military bases, and a blood bank. Hackers exploited internet-connected cold chain monitoring systems to alter temperatures, causing food spoilage and potential hazards. The attacks, attributed to Iran by researchers, hit systems including Danfoss units lacking security updates. CISA, the FBI, and other agencies urged critical infrastructure operators to remove remote control systems from the internet, strengthen passwords, and retire unsupported equipment. The hacks affected food, agriculture, transportation, and healthcare sectors across multiple countries.

Read assessment
Executive Briefing & Watchlist

Receive all future signals for Ahold Delhaize & competitors in your briefing

Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.

Daily primary source scansCurated executive briefingsUnsubscribe anytime