How hackers are turning grocery store freezers into heaters

November 3, 2026

3 min read

Add Us On GoogleAdd SciAm

By hijacking built-in defrost controls, attackers have spoiled millions of euros’ worth of food across Europe. U.S. military bases may have been hit, too

By Peter Hall edited by Eric Sullivan

The hacking era has hit supermarket freezer shelves. 

In October, attackers went after the refrigeration systems at hundreds of grocery stores in France. On the night of November 1, a second wave struck stores in Belgium, Sweden, the Netherlands, Ireland, Estonia, Finland and Luxembourg. Both followed a similar string of freezer failures at United States military bases back in August that the Pentagon now suspects were the work of hackers. In the worst cases, freezers flipped from cooling food to heating it to 50 degrees Celsius (122 degrees Fahrenheit) overnight. 

This type of attack has proved much more devastating than simply cutting the power. Unless someone caught the problem in time, the heat ruined the food before anyone had a chance to salvage it. Jonathan Sogin, a food science researcher at Cornell University, says this made the window to preserve food “way shorter than if you were to take something out to defrost it on your counter.” Retailers say they’ve lost millions of euros’ worth of produce and frozen goods so far.

On supporting science journalism

If you're enjoying this article, consider supporting our award-winning journalism by subscribing. By purchasing a subscription you are helping to ensure the future of impactful stories about the discoveries and ideas shaping our world today.

Some of the companies involved say the hackers went after the freezers’ evaporators, the coils where liquid refrigerant turns into gas, soaking up heat from the air inside the freezers as it does. To prevent frost from building up on the coils and stopping them from working, heating elements warm them every so often, in what’s called a defrost cycle. 

The attackers hijacked this defrost cycle remotely, keeping the heating element on until the whole freezer warmed up. The problem is, these freezers are online, and so are the controls that run them. “There are tiny computers running there, figuring out what temperature to keep the refrigerator,” says Swarun Kumar, an electrical engineering professor at Carnegie Mellon University. These types of machines are often called smart devices, but Kumar says the small computers inside tend to be “dumb,” unable to discern when they’re being misused.

Worryingly, nobody knows yet what the attackers want. No one has claimed responsibility, and it’s not even clear whether the same group is behind the rolling hacks. Nor has anyone asked for a ransom, though a demand would likely just prompt a store to send someone to turn the heating element off rather than pay up. 

"Because they are tiny computers, they're also dumb," says CMU professor Swarun Kumar. "They're ripe for attack."

This kind of attack could come to American grocers more widely, according to Amir Preminger, chief technology officer of cyberphysical security company Claroty, whose researchers flagged security flaws in this kind of refrigeration controller in August. Because the U.S. is so much larger, he’s especially concerned that attackers could move up the supply chain to target refrigeration systems in distribution centers, potentially knocking out many grocery stores in an area at once. “We’re going to be witnessing different types of attacks that have the same end result on damaging the food supply availability for customers,” he says.

Still, these hacks may be more limited in scope than they first appear. One of the control systems reportedly targeted has had an advisory out for this kind of security vulnerability since May 2025. According to Keith Stouffer, a cybersecurity expert at the National Institute of Standards and Technology, updating outdated equipment and putting it behind better firewalls could have stopped attacks like these and could stop them going forward. 

It may be tempting to cut off the freezers from the internet entirely, but there are real benefits to keeping them connected. “If you have a centralized management system, everything becomes smart and easy to manage,” Preminger says. “So all of a sudden, these devices that used to be standalone machines have Wi-Fi capabilities.”

Sogin dealt with a malfunctioning freezer of his own at home. “I put in a little thermometer, and it’s connected to some Wi-Fi thing, and so I get a notification if it goes off,” he says. Grocery store owners could, in theory, do the same, he suggests: hook up just the monitoring system online and send someone in whenever a problem turns up.

Each of those fixes costs money, though, and so does throwing out millions in food. Grocery stores run on notoriously thin profit margins (1 to 3 percent, by most estimates), and there are only so many freezer catastrophes the industry can take.