By Manuel Nau, Lead Editor at IoT Business News.
A second wave of cyberattacks targeting supermarket refrigeration systems across Europe has exposed vulnerabilities in connected operational technologies. Wireless Logic warns that network-level security and continuous monitoring are critical to protecting critical IoT infrastructure.
When hackers gain control of a connected refrigeration system, the consequences go beyond conventional IT security breaches. Temperature settings can be tampered with, food stocks destroyed and business operations disrupted in a matter of hours. For retailers increasingly dependent on connected equipment, cybersecurity has become an immediate operational risk.
On November 2, supermarkets and other food retailers in at least seven European countries experienced disruptions to their refrigeration and freezer systems after a suspected cyber attack. The incident affected businesses in Belgium, Sweden, the Netherlands, Estonia, Luxembourg, Finland and Ireland, with some refrigeration units reportedly reaching temperatures of 50°C.
The latest incident follows a similar attack on October 12 that affected hundreds of French supermarkets, forcing retailers to dump refrigerated and frozen products.
Connected Refrigeration Systems Become Cyber Security Targets
Unlike conventional cyber attacks that focus on stealing information or disrupting a company’s IT systems, these incidents target the operational technology (OT) responsible for controlling physical equipment.
According to reports from affected retailers and refrigeration service providers, attackers manipulated the refrigerator’s controls remotely, including activating the defrost cycle and changing temperature settings. The resulting disruption caused food shortages and forced some stores to remove the product from sale.
The incident highlights a particular vulnerability in connected commercial refrigeration: equipment designed primarily for reliable temperature management may remain operational for years when remote access interfaces, software and security configurations become outdated.
Reports have linked the affected installations to a refrigeration management system provided by Danfoss. The company pointed out that outdated software and insufficiently protected network connections contributed to the incident. However, the full scope of the attacks and whether they were centrally coordinated remain unclear.
For operators of distributed cooling infrastructure, the challenge is compounded by the number of systems installed in individual stores, warehouses and logistics facilities, often managed remotely by external service providers.
Wireless Logic Calls for Network-Level IoT Protection
Commenting on the incident, Iain Davidson, Head of Product Marketing at Wireless Logic, emphasized that cyber security failures in connected infrastructure can translate directly into physical and financial damage.
“The fact that we have seen a second major attack on a supermarket in less than a month after the recent incident in France shows that cyberattacks now go beyond data theft. Compromised IoT infrastructure causes physical damage and heavy financial losses.
Davidson identified aging operational technology as a significant problem. Industrial controllers and cooling systems can continue to use older firmware that no longer receives regular security updates, while remaining connected to remote management platforms via cellular, wired or Wi-Fi networks.
Wireless Logic says protecting individual devices isn’t enough, especially where legacy equipment isn’t easily upgraded or retrofitted with modern security capabilities.
The company even promotes network-level visibility, including AI-powered anomaly detection that can identify suspicious communication patterns and block connections to potentially harmful IP addresses.
This approach addresses an important limitation of device-centric security: the operator may not have direct control over the firmware or security configuration of each connected asset, especially when the equipment comes from different manufacturers or is maintained by third parties.
However, network monitoring is no substitute for securing remote access. Effectiveness depends on visibility into appropriate communications, while compromised credentials or legitimate management channels can make malicious commands more difficult to distinguish from legitimate activity.
What Attacks Mean for Industrial IoT Deployment
The importance of what is happening in supermarkets goes beyond food stores. Similar operational dependencies exist in cold chain logistics, pharmaceutical storage, industrial manufacturing and other environments where connected controllers manage temperature-sensitive processes.
For companies and system integrators, these developments increase the need to assess cybersecurity across the entire IoT deployment rather than just focusing on individual endpoints.
Practical measures include limiting internet exposure, strengthening remote access authentication, updating vulnerable software, segmenting operational networks and monitoring unusual device activity. Independent temperature alarms and clearly defined incident response procedures can also help reduce the impact of unauthorized changes.
Connectivity providers play a role in this architecture, especially where mobile IoT networks enable remote management of geographically dispersed equipment. Network isolation, traffic visibility and controlled access can provide additional protection without requiring modifications to each installed device.
A key lesson is that connected equipment creates a potential path from cybersecurity incidents to physical operational disruptions. As the European refrigerator attack shows, securing the road requires coordinated protection between devices, communication networks and remote management platforms.