Swedish Supermarket Freezers Hacked: When Food Is Cooked Remotely

Have you ever imagined that a freezer – a device that supposedly only emits cold air – could become the target of a cyberattack? Not to steal data, not to demand ransom, but to destroy food and spread panic in the community.

That is no longer a movie scenario. On the night of November 2, 2026, a series of supermarkets in Sweden and many other European countries woke up to a haunting sight: temperatures in freezers and refrigerators were pushed up to 50°C. Food melted. Goods spoiled. And all of this happened because of a few lines of code sent remotely.

Join me, SilverZ, in dissecting this event from its roots. Because this is not just a story about a single cyberattack. It is a wake-up call about the vulnerabilities of a hyper-connected world, where even the most mundane everyday devices can become weapons.

What Happened? When Freezers "Rebelled"

Let's go back to that time. On the night of Sunday, November 1st and early Monday morning, November 2, 2026, supermarkets belonging to Sweden's two largest retail chains – ICA and Coop – began receiving reports of unusual incidents. Temperatures in freezers and refrigerators were no longer at the deep sub-zero levels necessary to preserve food. Instead, they spiked up to 50°C.

The consequences were catastrophic. Frozen food melted. Meat, fish, vegetables, and dairy products were completely ruined. There were reports that food did not just melt but was also "partially cooked" due to the extreme heat. Supermarket employees were forced to clear out shelves en masse, filling giant garbage bins.

At the ICA Kvantum branch in Sjöbo, southern Sweden, the store posted on social media that their refrigerators and freezers had suffered a cyberattack and temperatures were set to 50°C. Another ICA branch in Stockholm reported that the attack occurred at 2 AM, and "everything was destroyed." This store was forced to close for a period before reopening to customers.

As for Coop, a spokesperson confirmed that 7 out of their 800 stores in Sweden were affected by the incident. Meanwhile, ICA stated that "a limited number" of stores operating outside ICA's central network were affected, but declined to disclose specific figures.

Not Just Sweden: The Wave of Attacks Spreads Across Europe

What is even more alarming is that Sweden was not the only affected country. During the same time frame, supermarkets in Belgium, Luxembourg, and Estonia also recorded similar incidents.

In Belgium, the Delhaize supermarket chain stated that about 40 stores were affected by an "IT incident" impacting refrigeration systems. The Carrefour chain also confirmed that 15 out of their more than 700 stores in Belgium were affected, although they described the impact as "extremely limited." In Ireland, 13 SuperValu stores were similarly affected.

But what makes this even more concerning is the history of similar attacks. Just weeks earlier, in October 2026, hundreds of supermarkets in France were targeted in the exact same manner. Hackers took remote control of refrigeration systems, causing temperatures to skyrocket, causing an estimated tens of millions of euros in damage and even triggering fires at some stores.

And it is not just Europe. In early August 2026, a series of mysterious freezer malfunctions occurred at at least six US military bases. The Pentagon is currently investigating whether this was a targeted cyberattack.

Attack Mechanism: No Malware Needed, Just "Putting on Rubber Gloves and Turning a Switch"

What makes this attack particularly dangerous is its terrifying simplicity.

According to Rafe Pilling, Director of Threat Intelligence at cybersecurity firm Sophos, this attack did not require malware. No malicious software was installed. No trace of a "weapon" was left at the scene. He compared it to "putting on rubber gloves and turning a switch."

So how did the attackers pull this off? The answer lies in the nature of IoT (Internet of Things) devices.

Many modern commercial refrigerators and freezers are connected to the internet to support remote maintenance and send alerts when systems malfunction. The software managing these devices is frequently connected online, and unlike computers or phones – where users are regularly reminded to install security updates – the software in devices like refrigerators can be left unpatched for long periods.

The attackers exploited that exact gap. They accessed the refrigeration management software, changed the temperature settings remotely, and then watched the food get destroyed. No physical break-in required. No complex security barriers to bypass. Just a software vulnerability and a little patience.

Who Is Behind It? Theories and Concerns

To date, no hacking group has claimed responsibility. No politically motivated "hacktivist" group has stepped forward. Nor are there any ransomware gangs demanding money – and that is what makes the incident even more puzzling.

Because, as Pilling pointed out, demanding a ransom would be very difficult in this case. The damage was done the moment the freezers were heated. There is no data locked away to hold for ransom. No systems are paralyzed to demand payment. There is only destroyed food and damaged consumer trust.

Pilling offers two most likely hypotheses: one is that a nation-state is demonstrating capabilities and sending a political signal; the other is a lone hacker acting for personal reasons.

The hypothesis of a nation-state actor is considered more likely, partly due to the clear psychological impact on citizens witnessing food being pulled from shelves. In recent weeks, Western intelligence agencies have warned that Russia is conducting a sabotage campaign across Europe in various forms, and this campaign may escalate in the coming months. Countries like Russia and China are believed to be among potential suspects.

EU Food Commissioner Christophe Hansen condemned the incident as "a deliberate attempt to disrupt our food supply chain and undermine consumer confidence in it."

Lessons for Vietnam: When IoT Is No Longer Just "Grown-Up Business"

You might be thinking: "This is Europe's problem, what does it have to do with Vietnam?"

The answer is: a great deal.

First, Vietnam is also undergoing rapid digitalization. Retail chains, supermarkets, and convenience stores in Vietnam are increasingly using IoT devices – from freezers and chillers to air conditioning systems – connected to the internet for remote monitoring and control. These devices, if not properly secured, can become targets for similar attacks.

Second, the food supply chain is a prime target for targeted attacks. When attackers want to cause public panic, food is one of the most effective targets. If just a few supermarkets are paralyzed, public sentiment can be disrupted for days.

Third, IoT security remains a major vulnerability in Vietnam. Many businesses still underestimate the importance of updating software, changing default passwords, or restricting access permissions for internet-connected devices. These small gaps can be exploited by attackers with basic technical knowledge.

Here are actions Vietnamese businesses need to take immediately:

1. Inventory All Internet-Connected IoT Devices

Know exactly which devices in your system are connected to the internet, what software they run, and who has access. You cannot protect what you do not know you own.

2. Change Default Passwords and Apply Least Privilege Access

This is the simplest yet most frequently overlooked step. Never run devices with manufacturer default passwords. And only grant access permissions to those who genuinely need them.

3. Update Software Regularly

Do not let software for freezers, refrigeration systems, or any IoT devices sit unpatched for years. Schedule regular audits and updates.

4. Isolate Networks for IoT Devices

Create a separate network (VLAN) for IoT devices, isolated from your main business network. If a device is compromised, attackers will not easily move laterally to other critical systems.

5. Have an Incident Response Plan

When an incident occurs, you need to know exactly what to do. Who will be contacted? How do you isolate affected devices? How do you restore operations? Prepare in advance rather than scrambling after the fact.

When a Hyper-Connected World Becomes a Double-Edged Sword

I have witnessed the tech industry go through numerous revolutions over the past two decades. From the days when the internet was something unfamiliar, to an era where every device – from the kitchen fridge to a supermarket's entire refrigeration system – is interconnected.

That connectivity brings boundless benefits. It helps us monitor remotely, save energy, and react faster to incidents. But it also opens up a massive attack surface that many businesses still do not fully realize.

The freezer attacks in Sweden and Europe are a reminder that in a hyper-connected world, every device can become a gateway. And attackers do not need to be tech geniuses. Sometimes, they just need patience, a little knowledge, and an ignored vulnerability.

The scariest thing is not this specific attack. The scariest thing is that it can repeat anywhere, at any time – and we are still not truly prepared for it.

If you discovered tomorrow that your supermarket's freezer system – or even the smart fridge in your home – had been compromised and controlled remotely, what would you do first? And more importantly, are you ready for a future where every connected device is a potential target – or do you still think "that could never happen to me"? Share your views below, because in a world where freezers can be hacked to destroy food, everyone's preparation helps make the community safer!