When Hackers Turn Freezers Into Ovens: Why OT Security Deserves Attention

A supermarket freezer is supposed to keep food cold. In parts of Europe, attackers have reportedly managed to make the opposite happen.

On 2 November 2026, supermarket operators in several European countries reported disruptions to refrigeration and freezer systems. Retailers in Belgium, Luxembourg, Sweden and Ireland reported affected locations, while incidents were also reported in Estonia and other markets. Some systems reportedly reached temperatures as high as 50°C. The disruptions forced businesses to discard food and investigate their systems. [1][2]

The incidents followed a similar attack in France on 11–12 October, when refrigeration systems at hundreds of supermarket locations were reportedly manipulated. The exact number of directly affected stores varies across reports, so the scale should be treated carefully. Authorities and investigators have not established that all these incidents were connected or publicly identified those responsible. [3]

The lesson, however, is clear: cyber risk can reach far beyond computers and corporate data.

How can a freezer become a cyber target?

Refrigeration systems are part of operational technology (OT). Unlike conventional IT systems, which primarily process information, OT monitors and controls physical equipment and processes.

Modern refrigeration infrastructure may include connected controllers, central management software, sensors and remote maintenance interfaces. These connections help operators manage multiple locations efficiently. They can also create additional entry points when access is poorly secured.

Common security weaknesses in connected refrigeration systems include internet-exposed controllers, unsecured remote access, outdated software and insufficient system monitoring. These gaps can give unauthorised parties an opportunity to access system controls and interfere with physical operations.

This is why OT security needs to account for reliability, safety and operational continuity. NIST's September 2026 draft of SP 800-82 Rev. 4 specifically addresses the security requirements of OT environments, including building automation, food and agriculture, and connected industrial systems. [4]

Seven steps to reduce OT exposure

Organisations should start by understanding what is connected and how those connections are managed. A practical OT security programme should cover seven areas:

1. Identify every connected device. Build and maintain an inventory of controllers, sensors, servers and supporting equipment.

2. Find and fix security gaps. Assess vulnerabilities, outdated components and exposed management interfaces.

3. Restrict unauthorised access. Apply strong authentication and limit remote access to approved users and necessary functions.

4. Monitor unusual activity. Review system logs and watch for unexpected configuration changes or abnormal operating conditions.

5. Separate critical systems from other networks. Use network segmentation to limit the spread and impact of a compromise.

6. Update software and firmware. Apply security updates through a controlled process that accounts for operational and safety requirements.

7. Prepare for incidents. Establish response procedures, recovery priorities and safe isolation plans before an incident occurs.

These measures are consistent with joint government guidance on secure OT connectivity, which recommends limiting exposure, controlling and monitoring access, strengthening network boundaries and planning for isolation. [5]

Where Bronyx AI fits into the picture

Organisations also need to examine the IT environments and access paths that support their operational systems. Corporate networks, remote access infrastructure and connected management services can form part of the wider exposure around OT.

This is where AI-assisted penetration testing can contribute. Bronyx AI, ITSEC's AI-assisted autonomous penetration testing platform, provides a way to assess authorised digital environments for weaknesses that could expose an organisation's wider infrastructure.

Its role should be understood clearly. Bronyx AI is not presented as a tool for directly testing refrigeration controllers, PLCs or other industrial control equipment. OT systems require specialised assessment methods that account for their operational and safety requirements.

ITSEC's OT cybersecurity services address that specific need. With ISA/IEC 62443-certified professionals, the services include OT Cybersecurity Risk Assessments, Asset Discovery, Security Architecture Reviews, Threat & Vulnerability Assessments, Network Segmentation and Cybersecurity Roadmaps.

From refrigeration and HVAC to power, water and oil and gas, protecting operational systems starts with understanding the risks across both the digital and physical environments.

Assess your OT risks. Protect your operations. Build resilience.

Explore Bronyx AI for AI-assisted penetration testing of authorised digital environments, or talk to ITSEC about OT-specific cybersecurity assessments and services.

References

1. Reuters, New cyberattack on supermarket fridges sweeps across Europe, 2 November 2026. Read article

2. Associated Press, Supermarket freezers in several European countries hit by apparent cyberattacks, 2 November 2026. Read article

3. Le Monde, A disastrous day for French supermarkets after massive cyberattack targets refrigeration systems, 13 October 2026. Read article

4. NIST, SP 800-82 Rev. 4: Guide to Operational Technology (OT) Security, Initial Public Draft, 21 September 2026. Read publication

5. Australian Cyber Security Centre, Secure connectivity principles for Operational Technology (OT), 15 January 2026. Read guidance