When the freezers become the Front Line

Europe woke up this morning to a new kind of blackout - not the lights, but the cold.

A hacking attack that started overnight has spread from Sweden to Belgium, forcing supermarkets to throw away food after their fridges and freezers were turned into ovens.

Reuters and AFP are reporting the same method everywhere:

Ahold Delhaize and Colruyt said on Monday that an IT incident overnight hit fridges and freezers in dozens of stores in Belgium and Luxembourg, while Swedish grocers ICA and Coop reported similar temperature spikes. Belgian SPAR stores and Estonian supermarkets also affected.

Sweden's national cybersecurity centre says it is investigating local incidents around Sweden. One Swedish ICA store said on social media that the temperature of its refrigerators and freezers had been "hacked" overnight and set to 50 degrees Celsius.

That 50-degree number is the signature. Inside stores, the scene was identical.

At an ICA in Stockholm, Engla Ingwall, sales manager, told Reuters during a visit: "everything is destroyed," adding the attack occurred at 2 a.m.. "There has been a cyberattack and all our freezers reached 50 degrees (Celsius)".

In Belgium, the CEO of refrigeration company Sabcobel, which operates Delhaize's systems, told Belga the units' evaporators were switched to defrost mode — essentially telling the freezer to heat itself to de-ice.

This is not isolated. It is the sequel.

Last month, France was hit by the same playbook on a larger scale. Police said hackers seized control of cooling units at hundreds of supermarkets, raising temperatures as high as 50 degrees Celsius and causing fires and food losses.

In that French attack, the toll was enormous: More than 500 stores were affected in total, including about 300 Intermarché outlets, about 100 Cooperative U, 80 Carrefour. In one extreme case, an Intermarché store in La Haye in northwestern Manche said its refrigerator temperature rose to 80 C and that the equipment melted.

Investigators there found a vulnerability in refrigeration control software supplied by Danish company Danfoss, with controllers running outdated firmware.

And the US link is no longer theoretical.

The Pentagon is investigating whether a cyberattack triggered a series of commercial freezer failures that spoiled food across multiple US military bases in August, according to a US official. The disruptions hit approximately six commissaries — the on-base grocery stores.

At Fort Huachuca in Arizona, base officials discovered that a walk-in freezer had unexpectedly shifted into defrost mode, heating its inventory. The base's own Facebook post said it "went into defrost mode where it heated up all the food. Trust us when we say it was 'spoiled.'"

Three takeaways:

1. This is hybrid warfare without missiles. You don't need to bomb a food supply. You just need to tell 500 Danfoss AK-SM controllers to defrost at 2 a.m. The result is the same: empty shelves, millions in losses, public anxiety.

2. The attack surface is absurdly small. A supermarket fridge is now an IoT device, internet-connected for maintenance. Team82, Claroty's research unit, warned in August about flaws that could let attackers bypass authentication and run code. No one patched.

3. The quote from that Belgian store manager — "I only have two words for them: wake up, please, because there's something going on" — is exactly right.

For two months we have had: French supermarkets hit, US military commissaries hit, and now a synchronized hit from Sweden to Estonia to Belgium. No group has claimed responsibility. Moscow has denied involvement in sabotage, as it always does.

But whether this is extortion, as researchers like SentinelOne suggest, or a state testing how Europe reacts when its butter melts, the lesson is the same.

We spent a decade securing banks and hospitals. We forgot to secure the cold chain that keeps a continent fed.

And today, from ICA Kvantum in Sjöbo to Delhaize in Brussels, that cold chain hit 50 degrees.

Implications for India

India is more vulnerable, not less.

The same Danish controllers — Danfoss AK-SM series — flagged in the France and Belgium attacks are standard in India. They run Reliance Retail, DMart, Star Bazaar, Domino's and McDonald's cold rooms, Amul and Mother Dairy chilling centres, and pharma cold chains. Most run on default passwords and outdated firmware, connected for remote maintenance.

Two specific risks:

1. Food and dairy: Unlike Europe where 50 degrees means wastage, in India it means 30-40% of already-strained cold chain loss. A synchronized defrost attack in May — peak heat — would destroy milk, vaccines and frozen exports in hours.

2. No OT law: India has IT Act and CERT-In rules for IT, but no mandatory OT security standard for retail refrigeration. The France attack exploited exactly that gap.

Europe is treating this as hybrid warfare. The US Cyber Command is coordinating with French police on the August commissary failures.

India should immediately: audit Danfoss/cold chain controllers in critical retail and dairy, force firmware updates and air-gap defrost controls, and include supermarket cold chain in National Critical Information Infrastructure under NCIIPC.

Because if freezers can be turned into ovens in Stockholm and Arizona, they can be turned into ovens in Sonepat.

Disclaimer: The views expressed here are solely those of the author and do not in any way represent the views of exchange4media.com.