Hackers turn Europe’s fridges into weapons as Cyber War hits supermarkets and blood banks

By Sam Agogo

For more than four years, Europe’s war has been measured in missiles, drones and shifting front lines. This week it revealed a different face. Before dawn on Monday, freezers in supermarkets from Sweden to Belgium began warming without warning. In France, refrigerated units storing blood plasma were remotely instructed to rise toward temperatures that could have rendered their contents useless. No missile crossed a border. No soldier appeared at a checkpoint. The weapon was a login screen.

Advertisements

Advertisements

The conflict in Ukraine has shown repeatedly that modern warfare extends far beyond the battlefield. As Russia’s invasion enters another brutal phase, governments across Europe are confronting a new reality: the digital systems that keep food fresh and medicine safe can become targets just as surely as military infrastructure.

The first signs emerged on the night of October 11 and 12 in France. Hackers infiltrated refrigeration controllers manufactured by Danish company Danfoss, equipment used extensively by food retailers across Europe. Once inside, they reportedly forced the systems into continuous defrost mode.

Advertisements

The consequences were immediate.
Temperatures inside refrigerators and freezers surged, in some cases reaching 50 degrees Celsius. Hundreds of stores were affected. Retail chains including Intermarché, Netto, Carrefour, Monoprix, E.Leclerc and Coopérative U reported disruptions. Large quantities of food had to be discarded, while some outlets experienced equipment failures and fires linked to overheating systems.

French prosecutors launched an investigation. The country’s cybersecurity agency traced the incident to a known software vulnerability affecting the refrigeration controllers. Security researchers had publicly warned about weaknesses in the systems months earlier, and patches had already been issued. Yet many operators had apparently failed to install the available updates.

What initially appeared to be an isolated incident soon proved something much larger.

A second, broader wave struck Europe this week. Supermarkets in Belgium, Luxembourg, the Netherlands, Sweden, Finland, Estonia and Ireland reported nearly identical disruptions. By the following day, similar incidents had surfaced in Germany, Italy, Romania and Britain.

Major retailers, including Ahold Delhaize and Colruyt, acknowledged being affected. A refrigeration contractor in Belgium said evaporator systems had again been switched into defrost mode remotely. In Stockholm, one store manager surveyed ruined inventory and concluded that virtually everything had been lost. In Estonia, a supermarket freezer reportedly reached temperatures as high as 50 degrees Celsius.

Authorities in Belgium have opened a criminal investigation, while preliminary estimates suggest losses running into millions of euros through spoiled stock, damaged equipment and interrupted operations.

Then the campaign crossed an even more alarming threshold.

Overnight between November 1 and 2, attackers reached refrigeration systems associated with France’s national blood service, the Établissement Français du Sang (EFS). According to officials, temperature settings at three plasma-storage facilities were altered to dangerously high levels through systems operated by an equipment supplier.
Emergency alarms activated before any disaster could unfold.

Staff moved plasma stocks to alternative locations, and the blood service says no medical products were lost and no patients were harmed. Collections and deliveries continued uninterrupted.
The incident nonetheless rattled health authorities.

The EFS supports more than 1,900 hospitals and provides vital blood products for over one million patients annually. Had the attack succeeded, the implications would have reached far beyond damaged equipment or financial losses. It would have struck directly at a critical component of public healthcare.

French cybersecurity officials and the Health Ministry are investigating. During the same week, cyber incidents were also reported by financial institutions including Crédit Mutuel and Arkéa, although investigators have not established any connection between those events and the refrigeration attacks.
As with many cyber operations, identifying the perpetrators remains difficult.

Officially, investigators have not assigned responsibility. Belgium’s Centre for Cybersecurity has cautioned that definitive attribution may never be possible.

Yet two openly pro-Russian hacker groups, NoName057(16) and the Z-Pentest Alliance, have publicly claimed responsibility through messages on Telegram. The groups released what they described as thousands of lines of stolen Danfoss login credentials and portrayed the attacks as evidence of Europe’s technological vulnerability.

NoName057(16) emerged shortly after Russia’s full-scale invasion of Ukraine in 2022 and has previously been linked to disruptive attacks against government, banking and media targets. Z-Pentest Alliance, formed more recently by individuals associated with other pro-Kremlin cyber groups, has focused on industrial control systems and was sanctioned by the European Union earlier this year.

Security experts remain divided over the claims. Some analysts caution that public boasts by hacker groups do not necessarily prove responsibility. Others note that the choice of targets and the timing fit a broader pattern of hybrid pressure directed at European states that support Ukraine.

The groups themselves offered no ransom demand and sought no apparent financial gain. Instead, they blamed operators for poor cybersecurity practices while warning that similar vulnerabilities exist in water systems, power facilities and food-distribution networks.
That absence of financial motivation is significant.

Cybercriminals typically seek money. These attackers appeared more interested in disruption, anxiety and demonstrating how easily everyday life can be disturbed. The objective seems less about profit than about undermining public confidence in systems people rarely think about until they fail.
The costs are already substantial. Retailers have lost inventory and revenue. Suppliers, insurers and logistics operators are absorbing secondary losses.

Consumers encountered empty shelves in affected locations, while food producers face disruptions rippling through supply chains.

Governments, meanwhile, are confronting a question they have seldom had to ask before: Should food refrigeration and medical cold storage be formally classified as critical infrastructure?
Cybersecurity analysts warn that thousands of refrigeration systems across Europe continue to operate with outdated software vulnerable to known exploits. The recent incidents have turned what was once considered an obscure technical issue into a matter of national resilience.

The lesson extends well beyond Europe.
Countries such as Nigeria are rapidly digitising hospitals, supermarkets, banks, power utilities and public services, often relying on imported equipment connected to the internet. The same efficiencies that make these systems attractive can also create new vulnerabilities when software updates are neglected and security protections remain weak.

If a hacker can remotely heat a freezer thousands of kilometres away by exploiting a neglected controller, then geography offers little protection. In an age of connected infrastructure, the distance between conflict and daily life is shrinking.

Modern war is no longer confined to trenches, skies or seas. Increasingly, it runs through supermarket aisles, hospital storerooms and the silent machines that keep societies functioning. The battlefield of the future may not begin with an explosion. It may begin with a system login and a temperature setting changed in the dark.

For Comments, Reflections and Further Conversation
Email: samuelagogo4one@yahoo.com
Phone: +2348055847364

Advertisements

Advertisements