← All playbooks
HighAttack · 2026-11-02

Supermarket freezers hacked overnight in Belgium and Sweden

What happened

Refrigeration systems at about 40 Delhaize stores in Belgium had their settings tampered with overnight, and Delhaize calls it an IT incident; staff paused the forced defrost to save food. Carrefour Belgium reports 15 stores hit. In Sweden, ICA and Coop say freezer temperatures rose sharply at several stores, and one store says its units were set to 50°C. It follows last month's attacks on cooling units at hundreds of French supermarkets.

Who's affected

Supermarkets and any business running internet-connected refrigeration or building-control systems.

✅ Fix / patch

  • Inventory connected fridge and HVAC controllers and take them off the open internet or put them behind a VPN.
  • Change default passwords on controller web interfaces.
  • Alert on setpoint or defrost changes outside maintenance windows.

🔎 Quick hunt check

No published indicators. Check firewall logs for inbound access to refrigeration or building-control web interfaces, and review controller logs for remote setpoint changes overnight Nov 1-2.

⏱ CISA deadline

Not in CISA KEV as of Nov 2, 2026.

Sources