Hackers activate automatic defrosting in supermarket fridges across Europe

796 points · 915 comments on HN · read original →

Points and comments are a snapshot, not live.

Hackers triggered automatic defrosting in supermarket fridges across Europe, spoiling stock.

An 'unprecedented' cyberattack targeted supermarket refrigeration systems across Europe, with hackers activating automatic defrosting. The incident impacted delivery and store prices. The attack follows a similar August 2026 incident at US military commissaries where all freezers were forced into defrost mode, spoiling frozen food. The compromised fridges are identified as Danfoss units. Commenters note the vulnerability of internet-connected IoT infrastructure and HVAC systems, which often lack basic network security, making them accessible via Shodan or similar tools.

What commenters are saying

Commenters immediately recognized this as a repeat of the August 2026 attack on US military commissaries, where all freezers were hacked into defrost mode, spoiling frozen food. The thread centers on why industrial refrigeration is internet-connected at all. A common explanation: HVAC service contracts require remote monitoring, but security falls to the lowest common denominator-HVAC technicians, not network security experts. Multiple parties (fridge manufacturer, service company, grocer) share blame for shipping insecure IoT systems. One commenter notes the Danfoss fridges likely have a trivial exploit due to poor embedded controller security.