Is it true that hackers are deliberately spoiling food in European supermarkets and a shortage is coming?

True. On the night of October 12, 2026, refrigeration control systems were hacked at hundreds of stores in France (Intermarché, Système U, Carrefour, Monoprix and others). On the night of November 2, more than a hundred stores were hit in Belgium, Luxembourg, the Netherlands, Ireland, Sweden, Finland, Estonia, Italy and Portugal. Fridges were switched to defrost mode or heated up to 50 °C. Delhaize, Colruyt, Carrefour Belgium and Coop Sweden explicitly called it a cyberattack; so did the authorities in Belgium, Luxembourg, Italy, Portugal and Estonia, while Sweden and Ireland speak of a "cyber incident." Before the second wave, from October 20 to 30, unknown actors across Europe tried to log into such controllers, including with factory passwords.^{[2][3][5][8][7][16]}

Not quite. The attackers broke into old remote refrigeration controllers (mostly from Danish maker Danfoss, plus Copeland and Dixell) that were exposed to the internet. Many no longer receive security updates, and some used simple or factory passwords. On October 12, France's cybersecurity agency warned that such internet-exposed devices are "very likely" already compromised. The head of the UK's cybersecurity centre said the French fridges were connected to the internet "with default passwords." George Nott, a journalist at the trade publication The Grocer, said the attacks exploited basic weaknesses and anyone could be behind them, from a state to teenagers. Meanwhile, the firm Lupovis sees signs of a coordinated operation and does not rule out state involvement. On November 9, France said the October attack was carried out by a hacking unit of Iran's Revolutionary Guards — so an attack can be simple and still state-run.^{[1][6][8][9][16][21]}

No evidence. EU Agriculture Commissioner Christophe Hansen called the attacks "a deliberate attempt to disrupt" the food supply, but said food security is "not currently at risk" — what is real is food waste and losses for stores. Several chains (Musgrave in Ireland, Coop in Italy and Sweden) said the problems were fixed quickly. Dozens of stores per country were hit, out of hundreds or thousands; those stores temporarily had fewer chilled and frozen goods on their shelves.^{[5][3][2][7][9]}

False. France's blood service (EFS) said temperature and defrost thresholds in plasma cold storage at three sites were raised to "extremely high levels." According to the newspaper Le Canard Enchaîné, the setting was changed from −30 °C to +110 °C. But that was a changed setting, not the temperature inside: staff noticed the problem and moved the plasma. According to EFS, no samples were damaged, and blood collection and distribution continue as usual.^[11][12][14]

Not proven. Pro-Russian hacker groups NoName057(16) and Z-Pentest claimed involvement on Telegram, but nobody has confirmed it, and experts are doubtful: these groups have used different methods before. Some researchers consider it "very likely" that a Russia-linked group is involved. Lupovis, the firm that spotted break-in attempts shortly before the attacks, says "it could well be Russia" (some of the servers were previously used by Russian groups), but cannot confirm it. Peter Neumann, a professor at King's College London: such actions fit the pattern of hybrid operations, but this is "not yet proof of involvement." The Kremlin called the accusations "absurd." Nobody demanded a ransom. On November 9, France blamed the October attack not on Russia but on Iran; the November wave in other countries has not been officially attributed to anyone.^{[10][9][3][16][17][21]}

Partly true. On November 9, France officially blamed the October attack on its supermarkets on Iran's Islamic Revolutionary Guard Corps (IRGC): the Paris prosecutor opened a case against the head of the Iranian hacker group Shahid Kaveh and his two deputies. Investigators point to the group's methods, Farsi and IP addresses linked to Iran; the evidence itself has not been published. Iran did not respond to Reuters' request for comment. But the November wave in Belgium, Sweden and other countries has not been officially attributed to anyone, and on the plasma storage, France's cybersecurity agency says it cannot yet be claimed that it was the same attacker. According to two former officials, investigators link similar freezer failures on US military bases in August 2026 to Iran, but without "high confidence."^{[21][22][13][19]}

Not proven. This is analysts' speculation about a possible joint operation by groups linked to Russia or Iran. No authority has officially linked the two.^[10]

Freezer failures at stores on several US military bases. The Pentagon speaks of a "possible refrigeration disruption"; hacking has not been officially confirmed.^[13]

Overnight, hackers take control of refrigeration at hundreds of French supermarkets. France's cybersecurity agency issues an alert about vulnerable Danfoss, Copeland and Dixell controllers. The Paris prosecutor opens an investigation.^[1][8]

From October 20 to 30 (peaking on October 26), unknown actors across Europe try to log into Danfoss refrigeration controllers: more than 276 attempts from 91 addresses. Nothing similar was seen elsewhere in the world (data from the firm Lupovis).^[16]

Second wave: around a hundred or more stores in at least 9 countries. Commissioner Hansen: the attack is deliberate, but food security is not currently at risk. Belgium's federal prosecutor opens a case.^[4][5][2][7]

The same night, settings are tampered with at plasma storage of the French blood service at three sites. The plasma is saved.^[11][12]

The Coop chain in Switzerland reports attempts to hack its refrigeration systems; it says they failed. Migros and Aldi Suisse know of no successful attacks.^[18]

The FBI, the cybersecurity agency CISA and the US Departments of Health, Agriculture and Transportation warn that refrigeration controllers in stores and cold storage warehouses are being attacked worldwide. They advise taking them off the open internet, changing factory passwords and installing updates. No culprit is named.^[19][20]

The Kremlin calls the accusations "absurd." Russian-language media run stories like "fridges turned into ovens," "a boiler for plasma" and "a threat that could leave stores without food."^[10][14][15]

Euronews: Europe was "probed" for two weeks before the attacks; nobody demanded a ransom, countries describe what happened differently, and Russia is only one of the theories.^[16]

France officially blames the October attack on Iran's Islamic Revolutionary Guard Corps: the Paris prosecutor opens a case against the head of the Iranian hacker group Shahid Kaveh and two deputies, and the foreign ministry summons Iran's ambassador and promises to push for EU sanctions. The November wave and the plasma storage are not part of the accusation.^[21][22]

List of countries and chains hit on November 2; vulnerable Danfoss controllers; nobody has claimed responsibility.^[2]

Commissioner Hansen: food security is not currently at risk; no culprit named.^[3]

Old controllers with default passwords were hacked; no sign AI was used; culprit unknown.^[6]

French blood service: plasma storage settings were changed, but no samples were damaged.^[11]

The Kremlin denies involvement; claims by pro-Russian groups are unconfirmed; some experts suspect a Russia-linked group.^[10]

"Fridges turned into ovens," "a real boiler for plasma" — while the text itself says the plasma was moved in time.^[14]

Headline about a threat "that could leave stores without food"; in the text, empty shelves are a possibility, not a fact.^[15]

Fridge attacks, threats to planes and attacks on media in one article; an expert says it looks like hybrid operations, but there is no proof of Russian involvement; no link between the events has been established.^[17]

For two weeks before the attacks, unknown actors scanned Danfoss controllers in Europe; no ransom; Russia is a researchers' guess, not an investigators' finding.^[16]

France blames the October attack on a unit of Iran's Revolutionary Guards; a case against the Shahid Kaveh group; the attack on plasma storage is not yet attributed to anyone.^[21]

The story is framed with frightening images — "ovens," "a boiler," "stores without food." We did not browse social media directly and could not estimate reach.^[14][15]

2026-11-05

Hasil: Real disruption: shelves temporarily went empty in some US stores. This is a case where an attack really did cause shortages — but through the supplier's warehouses and logistics, not through fridges in individual stores.^[4]

Hasil: An Israeli incident response firm attributed the attacks to Iranian hackers; no government confirmed the attribution.^[13]

Hasil: Misleading: flights did receive threats, but no bombs were found, stations were not targeted, and no culprit has been identified.