On or before Nov 5 2026, attackers manipulated the electronic control systems of refrigeration and deep-freeze units at Lüthi's Fleischwaren in Köniz-Liebefeld (Bern canton), Switzerland. The owner told SRF freezer temperatures reached 50–70°C, meat was cooked in place, price tags melted, and staff could enter only with masks. The shop disconnected the units from the network and closed temporarily to protect food safety, with a reopen target of Nov 20 if cooling is reliable again. SRF also reports three Volg retail branches found cooling-shelf parameters changed; Volg says it has tightened technical security measures. Swissinfo/Keystone and SRF call this the first publicly reported refrigeration-controller attack of this kind in Switzerland, following the October–November European supermarket refrigeration wave (France and later Belgium, Sweden, Ireland, Estonia, the Netherlands and others). Bern cantonal police were informed Monday and have opened inquiries; as of Nov 5 no formal complaint had been filed yet. Controller vendor and entry vector are not publicly named.
Food retail refrigeration / deep-freeze electronic control systems at Lüthi's Fleischwaren (Köniz) and Volg stores (vendor not disclosed)·Since Nov 3, 2026·
Overnight on Oct 11 to 12, attackers took remote control of internet-exposed refrigeration controllers at about 700 French supermarkets (Intermarché and Netto, Coopérative U, Carrefour with 80 stores, Monoprix, E. Leclerc and others), forcing fridges and freezers into continuous defrost with setpoints around 50°C, spoiling fresh and frozen stock and reportedly causing small fires. A second wave followed the next night and also hit stores with Dixell controllers. CERT-FR names Danfoss AK-SM and AK-SC series plus Copeland and Dixell xweb controllers, says campaigns are probably still ongoing, and tells operators to take every controller off the public internet. Most affected Danfoss units are end-of-life models (AK-SM 800, AK-SC 355) that get no fixes; the entry vector and attacker are still unconfirmed (pro-Russian groups NoName057(16) and Z-Pentest claimed the European attacks on Nov 4, but researchers say the claim is unverified). On Nov 2 2026 a second wave hit supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland (plus some stores in Portugal and Romania), and on Nov 3 France's blood service EFS said attackers had tampered with its plasma cold rooms through a refrigeration supplier, without losing any products. On Nov 5 2026, CISA, FBI, HHS, USDA and DOT issued a joint CSA urging operators worldwide to harden internet-exposed industrial refrigeration and cold-chain controllers against authentication bypass, arbitrary code injection and weak configurations that can force continuous heating or defrost.
Danfoss AK-SM / AK-SC refrigeration controllers, Copeland and Dixell xweb controllers·Since Oct 11, 2026·
🇫🇷 🚨 UPDATE: FRANCE REFRIGERATION ATTACKS EXPAND TO COPELAND AND DIXELL CONTROLLERS
Follow-up to our Oct 12 coverage of the Danfoss supermarket refrigeration attacks. On Oct 13, 2026, CERT-FR revised alert CERTFR-2026-ALE-012, adding Copeland xweb and Dixell xweb controllers to t.co/rqk69Vq9ant.co/GzehBfwh39
Je confirme qu’une cyberattaque touche depuis cette nuit les installations de production de froid de plusieurs magasins de notre réseau @CooperativeU.
Nos équipes sont pleinement mobilisées, en lien avec les frigoristes, pour rétablir la situation au plus vite. Une enquête devra permettre de faire toute la lumière sur cette attaque.
S’attaquer à des équipements essentiels à la conservation des produits frais et à l’approvisionnement alimentaire des Français est d’une extrême gravité et est inédit. C’est inacceptable.