# First known Swiss food-refrigeration cyberattack hits Lüthi's Fleischwaren (Köniz) and three Volg stores · pwn.watch > On or before Nov 5 2026, attackers manipulated the electronic control systems of refrigeration and deep-freeze units at Lüthi's Fleischwaren in Köniz-Liebefeld (Bern canton), Switzerland. The owner told SRF freezer temperatures reached 50–70°C, meat was cooked in place, price tags melted, and staff could enter only with masks. The shop disconnected the units from the network and closed temporarily to protect food safety, with a reopen target of Nov 20 if cooling is reliable again. SRF also reports three Volg retail branches found cooling-shelf parameters changed; Volg says it has tightened technical security measures. Swissinfo/Keystone and SRF call this the first publicly reported refrigeration-controller attack of this kind in Switzerland, following the October–November European supermarket refrigeration wave (France and later Belgium, Sweden, Ireland, Estonia, the Netherlands and others). Bern cantonal police were informed Monday and have opened inquiries; as of Nov 5 no formal complaint had been filed yet. Controller vendor and entry vector are not publicly named. Page: https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026 · generated 2026-11-06T14:36:23.099Z ## Status - Severity: high · status: live · patch: partial - Product: Food retail refrigeration / deep-freeze electronic control systems at Lüthi's Fleischwaren (Köniz) and Volg stores (vendor not disclosed) - Started: 2026-11-03 - Affected: Lüthi's Fleischwaren Köniz-Liebefeld refrigeration and deep-freeze electronic controls (vendor/model not disclosed); Three Volg store cooling shelves (parameters altered; vendor/model not disclosed) - Fixed in: No public vendor patch named: operators disconnected affected controls from the network; Volg says it strengthened technical security measures; Lüthi reopen target Nov 20 if cooling is reliable ## Follow this incident - RSS (one item per update): https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026/feed.xml - JSON Feed: https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026.json - This file: https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026/llms.txt ## Updates (newest first) - 2026-11-06: Hacker News discussion of the swissinfo English write-up. (https://news.ycombinator.com/item?id=50390716) - 2026-11-05: Lüthi's Fleischwaren states on its website/flyer that a targeted cyberattack manipulated electronic control of its refrigeration and deep-freeze units; the shop disconnects the systems and closes temporarily, aiming to reopen Nov 20 if cooling is reliable. (https://www.swissinfo.ch/eng/various/first-known-cyberattack-on-a-refrigeration-system-in-switzerland/92333384) - 2026-11-05: SRF reports the owner found freezer temperatures of 50–70°C (meat cooked, labels melted) and that three Volg branches also saw cooling-shelf parameters changed; Volg says it has reinforced technical security measures. (https://www.srf.ch/news/schweiz/kuehlanlage-manipuliert-berner-metzgerei-opfer-von-hackerangriff-auch-volg-betroffen) - 2026-11-05: Keystone-SDA / swissinfo frame the case as the first publicly known refrigeration-system cyberattack in Switzerland, linking it to recent supermarket fridge attacks in Belgium, Sweden, Ireland, Estonia and the Netherlands; Bern police say inquiries are underway but no formal complaint had been filed yet. (https://www.swissinfo.ch/eng/various/first-known-cyberattack-on-a-refrigeration-system-in-switzerland/92333384) - 2026-11-03: Bern cantonal police say they were briefly informed on Monday about the matter at the Köniz butcher shop (Keystone-SDA via swissinfo). (https://www.swissinfo.ch/ger/metzgerei-in-k%C3%B6niz-muss-nach-cyberangriff-vor%C3%BCbergehend-schliessen/92334848) ## Fix brief # Security brief: First known Swiss food-refrigeration cyberattack hits Lüthi's Fleischwaren (Köniz) and three Volg stores Source: https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026 · status: live · severity: high · updated Nov 6, 2026, 11:31 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is On or before Nov 5 2026, attackers manipulated the electronic control systems of refrigeration and deep-freeze units at Lüthi's Fleischwaren in Köniz-Liebefeld (Bern canton), Switzerland. The owner told SRF freezer temperatures reached 50–70°C, meat was cooked in place, price tags melted, and staff could enter only with masks. The shop disconnected the units from the network and closed temporarily to protect food safety, with a reopen target of Nov 20 if cooling is reliable again. SRF also reports three Volg retail branches found cooling-shelf parameters changed; Volg says it has tightened technical security measures. Swissinfo/Keystone and SRF call this the first publicly reported refrigeration-controller attack of this kind in Switzerland, following the October–November European supermarket refrigeration wave (France and later Belgium, Sweden, Ireland, Estonia, the Netherlands and others). Bern cantonal police were informed Monday and have opened inquiries; as of Nov 5 no formal complaint had been filed yet. Controller vendor and entry vector are not publicly named. Severity detail: First publicly reported Swiss refrigeration-controller attack; freezer forced to 50–70°C with food loss and temporary shop closure; three Volg stores also saw cooling parameters changed; fits the ongoing European cold-chain campaign - Product: Food retail refrigeration / deep-freeze electronic control systems at Lüthi's Fleischwaren (Köniz) and Volg stores (vendor not disclosed) ## Affected versions - Lüthi's Fleischwaren Köniz-Liebefeld refrigeration and deep-freeze electronic controls (vendor/model not disclosed) - Three Volg store cooling shelves (parameters altered; vendor/model not disclosed) ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix Upgrade to one of these fixed versions (or later on the same branch): - No public vendor patch named: operators disconnected affected controls from the network; Volg says it strengthened technical security measures; Lüthi reopen target Nov 20 if cooling is reliable After upgrading, re-run the checks above and redeploy/restart the affected services. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes Related tracked wave: french-supermarket-refrigeration-controller-attacks. Do not merge into the US commissary incident. ## Latest updates - Nov 6, 2026: Hacker News discussion of the swissinfo English write-up. - Nov 5, 2026: Lüthi's Fleischwaren states on its website/flyer that a targeted cyberattack manipulated electronic control of its refrigeration and deep-freeze units; the shop disconnects the systems and closes temporarily, aiming to reopen Nov 20 if cooling is reliable. - Nov 5, 2026: SRF reports the owner found freezer temperatures of 50–70°C (meat cooked, labels melted) and that three Volg branches also saw cooling-shelf parameters changed; Volg says it has reinforced technical security measures. - Nov 5, 2026: Keystone-SDA / swissinfo frame the case as the first publicly known refrigeration-system cyberattack in Switzerland, linking it to recent supermarket fridge attacks in Belgium, Sweden, Ireland, Estonia and the Netherlands; Bern police say inquiries are underway but no formal complaint had been filed yet. - Nov 3, 2026: Bern cantonal police say they were briefly informed on Monday about the matter at the Köniz butcher shop (Keystone-SDA via swissinfo). ## Write-ups & news - [First known cyberattack on Swiss food refrigeration system](https://www.swissinfo.ch/eng/various/first-known-cyberattack-on-a-refrigeration-system-in-switzerland/92333384) - [Kühlanlage manipuliert – Berner Metzgerei Opfer von Hackerangriff – auch Volg betroffen](https://www.srf.ch/news/schweiz/kuehlanlage-manipuliert-berner-metzgerei-opfer-von-hackerangriff-auch-volg-betroffen) - [Metzgerei in Köniz muss nach Cyberangriff vorübergehend schliessen](https://www.swissinfo.ch/ger/metzgerei-in-k%C3%B6niz-muss-nach-cyberangriff-vor%C3%BCbergehend-schliessen/92334848) - [First known cyberattack on Swiss food refrigeration system (HN)](https://news.ycombinator.com/item?id=50390716) - [Hacker legen die Filiale von Lüthi's Fleischwaren in Köniz-Liebefeld BE lahm](https://x.com/Blickch/status/2118331259021578601) ## Caveats Separate from us-military-commissary-refrigeration-outages-aug-2026. Same European refrigeration-controller wave already tracked as french-supermarket-refrigeration-controller-attacks (Nov 2 EU second wave named Belgium/Sweden/Ireland/Estonia/Netherlands; Switzerland not previously listed). Vendor/model for the Swiss victims is not disclosed in SRF/swissinfo coverage, so no Danfoss/Dixell/Copeland CVE attribution here. --- Machine-readable: https://pwn.watch/i/swiss-luethi-fleischwaren-volg-refrigeration-cyberattack-nov-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.