Attacks on cooling systems: Why supermarkets are being caught off guard by cyberattacks

BildIndependentCenter

German supermarkets, including an Edeka store in Reisbach, Bavaria, suffered cyberattacks where hackers remotely manipulated cooling systems to raise temperatures up to 50 degrees Celsius. This caused significant food spoilage, forcing retailers to discard large quantities of perishable goods, though some items were saved through community sharing initiatives. Police cybercrime units have launched investigations into the incidents, which occurred across North Rhine-Westphalia, Bremen, and Bavaria. The attacks appear linked to similar recent disruptions in Sweden and France, where over 100 stores were affected by manipulations of defrost functions. Manufacturer Danfoss noted that many compromised units were outdated devices lacking current security updates, while the total scale of damage and the identity of the perpetrators remain unknown.

Bias read (Center): The article relies on standard incident reporting with balanced quotes from police, corporate spokespeople, and manufacturers, avoiding partisan framing despite sensationalist headline elements.

Tagesschau (ARD)State / PublicCenterNov 3

German supermarkets have recently suffered cyberattacks targeting their cooling systems, following similar incidents in France three weeks prior. Experts attribute these vulnerabilities to retailers connecting central control software for refrigeration units directly to the internet without adequate firewalls or security measures. While large retail chains supplying over 500,000 people are legally classified as critical infrastructure, smaller entities often fall outside strict regulatory mandates despite still requiring basic cybersecurity standards. Researchers note that many essential supply chain partners, such as construction firms, remain unprotected under current laws, creating systemic risks. A study by the National Research Center for Applied Cybersecurity revealed that federal ministries fail to meet necessary security standards due to outdated devices and unresolved vulnerabilities. These deficiencies are frequently omitted from official reports by the Federal Office for Information Security, highlighting a gap between actual digital exposure and reported safety statuses.

Bias read (Center): The article maintains a neutral, technical tone by citing academic experts and research findings regarding infrastructure security gaps without employing partisan rhetoric or taking a stance on specific political actors.

Tagesschau (ARD)State / PublicCenterNov 3

Hackers have targeted cooling systems in several German supermarkets, switching them from cooling to heating mode overnight, which resulted in significant food waste. Affected stores include locations in North Rhine-Westphalia, Lower Saxony, and Bavaria, involving chains such as CAP, Rewe, and Edeka. In some cases, temperatures inside refrigerated units rose to 50 or 70 degrees Celsius, forcing retailers to discard large quantities of perishable goods. Police authorities in multiple states have opened criminal investigations into data manipulation and unauthorized access. This incident follows similar cyberattacks on supermarket cooling infrastructure across Belgium, Sweden, Ireland, Luxembourg, Estonia, Finland, and the Netherlands.

Bias read (Center): The article reports on a technical security incident using neutral language and cites police and store owners without political commentary.

taz – die tageszeitungIndependentCenterNov 3

Hackers have targeted cooling systems in European supermarkets, causing temperature rises that forced the disposal of large quantities of food in North Rhine-Westphalia, Germany. Sandra Salten, a regional manager for the Arbeiterwohlfahrt-operated supermarket in Wetter-Volmarstein, confirmed that both refrigerated shelves and external storage areas were affected by attacks on the remote maintenance provider. While specific damage costs remain unquantified, media reports indicate that additional stores in Wuppertal and the Münsterland region may also be impacted, though police have not yet provided information on these cases. Similar cyberattacks disrupted refrigeration units in Belgium, Sweden, Ireland, Luxembourg, Estonia, Finland, and the Netherlands over recent days. The identity of the perpetrators remains unknown.

Bias read (Center): The article relies on neutral factual reporting regarding a technical security incident, citing operational managers and noting the lack of police confirmation without using loaded language or taking a political stance.