A series of coordinated cyberattacks targeted supermarket refrigeration systems across at least nine European countries in early November 2026. Hackers gained remote access to Danfoss AK-SM refrigeration managers, overriding temperature settings and causing significant spoilage of perishable goods.
The attacks resulted in losses estimated in the millions of euros. The National Cyber Security Centre (NCSC) in the UK confirmed awareness of the incidents and worked to alert affected organizations. Pro-Russian hacktivist groups were initially linked to the attacks, although the Kremlin denied any state involvement.
The hackers exploited vulnerabilities in Danfoss AK-SM systems, causing temperatures in refrigeration units to rise as high as 50°C to 55°C. The attacks followed weeks of reconnaissance, where hackers tested default credentials and identified vulnerabilities in systems exposed to the internet.
The British Association of Independent Meat Suppliers reported that several of its members became collateral damage in the attacks. Additionally, the attacks affected not only supermarkets but also blood banks in France.
Cybersecurity firm Lupovis recorded over 276 probing attempts from 91 distinct threat actors prior to the attacks. Suspected groups involved in the attacks include NoName057(16) and Z-Pentest Alliance.