First known Swiss food-refrigeration cyberattack hits Lüthi's Fleischwaren (Köniz) and three Volg stores
Food retail refrigeration / deep-freeze electronic control systems at Lüthi's Fleischwaren (Köniz) and Volg stores (vendor not disclosed)
Sponsored
Brought to you byTinkerer Club
The private club for people who own their servers, run their own AI, and pay $0/month for software.
On or before Nov 5 2026, attackers manipulated the electronic control systems of refrigeration and deep-freeze units at Lüthi's Fleischwaren in Köniz-Liebefeld (Bern canton), Switzerland. The owner told SRF freezer temperatures reached 50–70°C, meat was cooked in place, price tags melted, and staff could enter only with masks. The shop disconnected the units from the network and closed temporarily to protect food safety, with a reopen target of Nov 20 if cooling is reliable again. SRF also reports three Volg retail branches found cooling-shelf parameters changed; Volg says it has tightened technical security measures. Swissinfo/Keystone and SRF call this the first publicly reported refrigeration-controller attack of this kind in Switzerland, following the October–November European supermarket refrigeration wave (France and later Belgium, Sweden, Ireland, Estonia, the Netherlands and others). Bern cantonal police were informed Monday and have opened inquiries; as of Nov 5 no formal complaint had been filed yet. Controller vendor and entry vector are not publicly named.
Why this severity: First publicly reported Swiss refrigeration-controller attack; freezer forced to 50–70°C with food loss and temporary shop closure; three Volg stores also saw cooling parameters changed; fits the ongoing European cold-chain campaign
- Started
- Nov 3, 2026
Affected
- Lüthi's Fleischwaren Köniz-Liebefeld refrigeration and deep-freeze electronic controls (vendor/model not disclosed)
- Three Volg store cooling shelves (parameters altered; vendor/model not disclosed)
Fixed in
- No public vendor patch named: operators disconnected affected controls from the network; Volg says it strengthened technical security measures; Lüthi reopen target Nov 20 if cooling is reliable
Timeline5
Hacker News discussion of the swissinfo English write-up.
Lüthi's Fleischwaren states on its website/flyer that a targeted cyberattack manipulated electronic control of its refrigeration and deep-freeze units; the shop disconnects the systems and closes temporarily, aiming to reopen Nov 20 if cooling is reliable.
SRF reports the owner found freezer temperatures of 50–70°C (meat cooked, labels melted) and that three Volg branches also saw cooling-shelf parameters changed; Volg says it has reinforced technical security measures.
Keystone-SDA / swissinfo frame the case as the first publicly known refrigeration-system cyberattack in Switzerland, linking it to recent supermarket fridge attacks in Belgium, Sweden, Ireland, Estonia and the Netherlands; Bern police say inquiries are underway but no formal complaint had been filed yet.
Bern cantonal police say they were briefly informed on Monday about the matter at the Köniz butcher shop (Keystone-SDA via swissinfo).
News & write-ups5
- First known cyberattack on Swiss food refrigeration systemSWI swissinfo.ch (Keystone-SDA) · Nov 5, 2026
- Kühlanlage manipuliert – Berner Metzgerei Opfer von Hackerangriff – auch Volg betroffenSRF · Nov 5, 2026
- Metzgerei in Köniz muss nach Cyberangriff vorübergehend schliessenSWI swissinfo.ch (Keystone-SDA) · Nov 5, 2026
- First known cyberattack on Swiss food refrigeration system (HN)Hacker News · Nov 6, 2026
- Hacker legen die Filiale von Lüthi's Fleischwaren in Köniz-Liebefeld BE lahmBlick (X) · Nov 5, 2026
Notes & caveats
Separate from us-military-commissary-refrigeration-outages-aug-2026. Same European refrigeration-controller wave already tracked as french-supermarket-refrigeration-controller-attacks (Nov 2 EU second wave named Belgium/Sweden/Ireland/Estonia/Netherlands; Switzerland not previously listed). Vendor/model for the Swiss victims is not disclosed in SRF/swissinfo coverage, so no Danfoss/Dixell/Copeland CVE attribution here.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
