93← Home

EU urges action as Germany, Romania and UK report supermarket cyberattacks

Headline from Al Jazeera · compiled from 4 sources

Our analysis · checked against 11 sources

Hackers heat fridges at German and Romanian supermarkets and UK meat suppliers

Hackers raised fridge temperatures at four supermarkets in Germany, six in Romania and some UK meat suppliers, bringing affected countries to at least 11 after an October wave in France. The EU convened a task force and calls the incidents linked; no new rules are proposed, and the culprit and motive remain unknown and disputed.

The framing"Supermarket cyberattacks" does fit the four German and six Romanian supermarkets affected. But in the UK the incident did not directly hit supermarkets; it reached some of the British Association of Independent Meat Suppliers' 300-plus members.

What the headline leaves out

  • In the UK, meat suppliers were hit, not supermarkets directly.
  • Hackers exploited Danfoss controllers. The flaws were disclosed in March 2025 and patched in August 2025.
  • Shares were small: about 15 of Carrefour's 700 Belgian stores and 7 of Swedish Coop's 800.
  • EU rules (NIS2) do not cover retail stores. EU action so far is meetings.

What the coverage got wrong

  • Al Jazeera: “The UK reported supermarket cyberattacks, with hackers raising fridge temperatures at UK supermarkets”. In the UK the incident did not directly hit supermarkets; some of AIMS's 300-plus meat-supplier members were caught up.english.news.cn

What happens next

Commissioner Hansen said the attacks will be discussed at the EU Security College's next meeting to assess retailers' contingency plans; no date is set, though cabinet chiefs agreed it should be soon, an EU official told Politico. Fredrik Blix of Visente AB warns that thousands of units never got the update and the oldest cannot be updated. Romania's Dan Cimpean calls the attacks "semi-amateurish" and not a state actor, while Lupovis traced earlier probing to hosting used by Russian adversaries. Watch for an attribution from Belgian prosecutors and any confirmed-exploitation report from Danfoss under the Cyber Resilience Act.

Possible knock-on effects
  • Unpatched and unpatchable controllers stay online, so further waves could hit chains that have not taken their systems offline, adding losses for retailers and suppliers. (named expert: Fredrik Blix, Visente AB: "thousands of units never got the update". Watch for: New incidents reported after 3 November, or vendors confirming the share of devices patched)
  • Other chains may follow Coop in moving refrigeration equipment off direct internet access, which could reduce exposure but add upgrade costs. (precedent: Coop began such an upgrade after the October 2026 French attacks and accelerated it after the November wave. Watch for: Announcements by Carrefour, Musgrave or other chains of network upgrades)
  • If Danfoss controller exploitation is confirmed, the manufacturer may owe a 24-hour early warning to ENISA, which could give EU agencies a formal basis for follow-up. (mechanism: The Cyber Resilience Act triggers reporting only on confirmed active exploitation. Watch for: Public confirmation of a CRA report filed with ENISA)

Sources: Al Jazeera: EU urges action as Germany, Romania and UK report supermarket cyberattacks, Xinhua: UK incident and AIMS members, Al Jazeera: Very cold war – who's attacking Europe's supermarket freezers, Europesays: Italy store impacts, CNBC: Supermarket fridge hacks across Europe, Infosecurity Magazine: Cyber refrigeration attacks, Wikipedia: 2026 French supermarket refrigerator hack, Help Net Security: Lupovis reconnaissance findings, Intnews: NIS2 and CRA scope, NBC News: French supermarket fridge hack, The Next Web: EU Commission to probe supermarket fridge hacks

Written in our own words from the sources above, and checked claim by claim before it was published. The report below says only what each outlet said.

The report: what outlets said

Al Jazeera reports that the EU says supermarket hacks in at least 11 countries are "not isolated", but a Romanian official suspects no state actor.[1]

According to Al Jazeera, hackers raised the temperatures of refrigeration systems at supermarkets in Germany, Romania and the United Kingdom during Monday's cyberattacks[2], and officials and company representatives said four supermarkets in Germany and six in Romania were affected.[1]Al Jazeera reports that EU spokesperson Thomas Regnier said the bloc's agencies were talking with national authorities to develop a joint response[1], adding: "These are not isolated incidents."[1] According to NZ Herald, EU food and agriculture commissioner Christophe Hansen said the attacks were a "deliberate attempt to disrupt our food supply chain".[3]Dan Cimpean, the director of Romania's National Cyber Security Directorate, told AFP: "It seems semi-amateurish."[1] He also told the agency that "We do not suspect, under any circumstances, that it is a state actor."[1]Al Jazeera reports that in the UK, hackers tried to target small meat-processing firms, but the impact was minimal, said Richard Horne, chief executive of the National Cyber Security Centre[1]. SBS reports that Horne called the incident "just the beginning."[4]According to Al Jazeera, Belgium was among the hardest-hit countries on Monday[1], and federal prosecutors there have opened an investigation.[1]In Sicily, Coop director Giuseppe Spadaro told Corriere della Sera: "We had to throw away everything.[1]The shelves are empty."[1] Al Jazeera reports that Prime Minister Giorgia Meloni's office said the incident had a "limited" impact.[1]SBS reports that software vendor Danfoss has advised customers to check the status of their refrigerator controls and cut off internet connections before upgrading security patches.[4]

Listen to the songEurope News — November 04, 2026

Sources

  1. [1]EU urges action as Germany, Romania and UK report supermarket cyberattacks | European Union News | Al Jazeera
  2. [2]EU urges action as Germany, Romania and UK report supermarket cyberattacks | European Union News - EUROPE SAYS
  3. [3]At least 11 European countries snared in freezer cyber attacks - NZ Herald
  4. [4]UK and Germany Also Hit by Refrigerators Set to 50°C... Supermarket Hacking Spreads to 11 European Countries

Every sentence here reports what a named outlet said, with a link to it. Compiled by 93 from the reporting below.

This topic, day by day

EU urges action as Germany, Romania and UK report supermarket cyberattacks | 93