Is it true that hackers are deliberately spoiling food in European supermarkets and a shortage is coming?

True. On the night of October 12, 2026, refrigeration control systems were hacked at hundreds of stores in France (Intermarché, Système U, Carrefour, Monoprix and others). On the night of November 2, more than a hundred stores were hit in Belgium, Luxembourg, the Netherlands, Ireland, Sweden, Finland, Estonia, Italy and Portugal. Fridges were switched to defrost mode or heated up to 50 °C. Delhaize, Colruyt, Carrefour Belgium and Coop Sweden explicitly called it a cyberattack.^{[2][3][5][8][7]}

Not quite. The attackers broke into old remote refrigeration controllers (mostly from Danish maker Danfoss, plus Copeland and Dixell) that were exposed to the internet. Many no longer receive security updates, and some used simple or factory passwords. On October 12, France's cybersecurity agency warned that such internet-exposed devices are "very likely" already compromised. The head of the UK's cybersecurity centre said the French fridges were connected to the internet "with default passwords."^[1][6][8][9]

No evidence. EU Agriculture Commissioner Christophe Hansen called the attacks "a deliberate attempt to disrupt" the food supply, but said food security is "not currently at risk" — what is real is food waste and losses for stores. Several chains (Musgrave in Ireland, Coop in Italy and Sweden) said the problems were fixed quickly. Dozens of stores per country were hit, out of hundreds or thousands; those stores temporarily had fewer chilled and frozen goods on their shelves.^{[5][3][2][7][9]}

False. France's blood service (EFS) said temperature and defrost thresholds in plasma cold storage at three sites were raised to "extremely high levels." According to the newspaper Le Canard Enchaîné, the setting was changed from −30 °C to +110 °C. But that was a changed setting, not the temperature inside: staff noticed the problem and moved the plasma. According to EFS, no samples were damaged, and blood collection and distribution continue as usual.^[11][12][14]

Not proven. Pro-Russian hacker groups NoName057(16) and Z-Pentest claimed involvement on Telegram, but nobody has confirmed it, and experts are doubtful: these groups have used different methods before. Some researchers consider it "very likely" that a Russia-linked group is involved. The Kremlin called the accusations "absurd." No government or investigator has named a culprit.^[10][9][3]

Not proven for Europe. According to two former officials, investigators treat similar freezer failures at stores on US military bases in August 2026 as a cyberattack, and some evidence points to Iran, but there is not "high confidence" in that. An Israeli incident response firm attributes attacks on a grocery chain and a food plant in Israel to Iranian hackers. The European attacks have not been attributed to anyone.^[13][4]

Not proven. This is analysts' speculation about a possible joint operation by groups linked to Russia or Iran. No authority has officially linked the two.^[10]

Freezer failures at stores on several US military bases. The Pentagon speaks of a "possible refrigeration disruption"; hacking has not been officially confirmed.^[13]

Overnight, hackers take control of refrigeration at hundreds of French supermarkets. France's cybersecurity agency issues an alert about vulnerable Danfoss, Copeland and Dixell controllers. The Paris prosecutor opens an investigation.^[1][8]

Second wave: around a hundred or more stores in at least 9 countries. Commissioner Hansen: the attack is deliberate, but food security is not currently at risk. Belgium's federal prosecutor opens a case.^[4][5][2][7]

The same night, settings are tampered with at plasma storage of the French blood service at three sites. The plasma is saved.^[11][12]

The Kremlin calls the accusations "absurd." Russian-language media run stories like "fridges turned into ovens," "a boiler for plasma" and "a threat that could leave stores without food."^[10][14][15]

List of countries and chains hit on November 2; vulnerable Danfoss controllers; nobody has claimed responsibility.^[2]

Commissioner Hansen: food security is not currently at risk; no culprit named.^[3]

Old controllers with default passwords were hacked; no sign AI was used; culprit unknown.^[6]

French blood service: plasma storage settings were changed, but no samples were damaged.^[11]

The Kremlin denies involvement; claims by pro-Russian groups are unconfirmed; some experts suspect a Russia-linked group.^[10]

"Fridges turned into ovens," "a real boiler for plasma" — while the text itself says the plasma was moved in time.^[14]

Headline about a threat "that could leave stores without food"; in the text, empty shelves are a possibility, not a fact.^[15]

The story is framed with frightening images — "ovens," "a boiler," "stores without food." We did not browse social media directly and could not estimate reach.^[14][15]

2026-11-05

Outcome: Real disruption: shelves temporarily went empty in some US stores. This is a case where an attack really did cause shortages — but through the supplier's warehouses and logistics, not through fridges in individual stores.^[4]

Outcome: An Israeli incident response firm attributed the attacks to Iranian hackers; no government confirmed the attribution.^[13]

Outcome: Misleading: flights did receive threats, but no bombs were found, stations were not targeted, and no culprit has been identified.