Skip to content

Refrigeration Cyberattacks and Backup Power

Refrigeration Cyberattacks Hit Europe: What U.S. Cold Storage Should Check Now

Between mid-October and early November 2026, hackers broke into internet-connected refrigeration controllers at hundreds of supermarkets across Europe and pushed some freezer setpoints as high as 122°F. On November 5, five U.S. federal agencies warned that the same activity is ongoing and that any organization relying on refrigeration should plan as if it’s a target.

If your business runs on cold storage, there are two things worth checking this week. Can your refrigeration keep running with its internet connection cut? And if utility power drops while you’re dealing with that, will your generator start and carry the load?

We service generators behind grocery stores, hospitals, cold storage warehouses, farms and water plants every week across Colorado, Florida and Texas. The question we ask every owner hasn’t changed. What does your business look like if the power, or the equipment it runs, quits tomorrow?

What happened in Europe and on U.S. military bases

Suspicious freezer failures showed up on U.S. bases about seven weeks before the first European attack made headlines. Here’s the timeline, newest first.

Date (2026)WhereWhat happened
Nov 5United StatesCISA, the FBI, HHS, USDA and DOT issued a joint fact sheet warning of ongoing attacks on industrial refrigeration and cold chain monitoring systems.
Nov 2FranceHackers raised temperature and defrost thresholds at three French blood bank sites through their refrigeration supplier. Alarms caught it and no blood products were lost.
Nov 1 to 2, overnightAt least seven European countriesSupermarket fridges and freezers in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland warmed overnight. Some setpoints hit 50°C (122°F).
Mid-OctoberFrance, Belgium, NetherlandsRefrigeration at hundreds of supermarkets was taken over. French police said the attacks caused fires and food losses.
Late AugustU.S. military commissariesFreezers at six or more on-base commissaries went into defrost overnight and spoiled food. The Pentagon is treating it as a suspected cyberattack.

Ahold Delhaize, one of the grocers hit in October, said the attack could cut its fourth-quarter sales by up to €250 million. The fridge attacks also landed in the same few weeks as a $6.3 billion crypto exchange theft and a fake nuclear strike alert sent through Ukraine’s emergency alert app, which is why the head of the UK’s National Cyber Security Centre said the world is in the “foothills” of a new hacking era.

Nobody has publicly claimed the refrigeration attacks, and U.S. officials haven’t named a culprit. The federal agencies also didn’t say whether any refrigeration systems in the U.S. have been targeted.

How the attacks worked and what kept the damage small

The attackers didn’t need to break anything physical. Most modern cases and walk-ins run off a controller that holds the setpoint and decides when to defrost. When that controller is reachable from the internet and unpatched or poorly configured, someone on the other side of the world can get in, change the settings and force the unit into continuous heating and defrost cycles. Operators can also lose their view of the actual temperature. The federal fact sheet warns this can spoil inventory and even create fire hazards. At Fort Huachuca in Arizona, every commissary freezer went into defrost mode overnight and heated the food.

The operators who got through it with the least damage did plain, practical things. France’s national blood service caught the attack because its monitoring and alarms flagged the temperature change early. Staff moved plasma into refrigerators with no network connection, and the health ministry shut off remote access to the affected equipment. No blood products were lost.

In Sweden, the grocery chain Coop had seven affected stores running again the next day after disconnecting their refrigeration from the internet.

One more detail matters for anyone with a service contract. In the blood bank case, the attackers got in through the refrigeration supplier’s remote access. The blood service itself was never directly targeted. If a vendor can reach your equipment from their office, so can anyone who gets into the vendor.

Where backup power fits in a refrigeration cyberattack

Every recovery step in Europe ran on electricity. Disconnected cases still need their compressors running, and the backup walk-in you move product into has to be cold when it gets there. If the utility drops while your team is in the middle of locking down a hacked system, you’re fighting two problems with no way to keep product cold.

The grid is a connected system too, and it’s carrying more demand every year from data centers and new construction. As AI makes it easier to find holes in IT systems, businesses are more exposed to cyberattacks than they used to be, and an attack that takes down power is one more outage worth planning for. Whether the outage comes from a hacker or a February deep freeze in Brighton, the plan on your end looks the same.

Here in Colorado we still walk into grocery stores with no backup power at all. Once a freezer climbs past safe temperature, that inventory is spoiled, and one long outage can cost a store more than a generator would have. Think of a generator as an insurance policy that holds asset value. If you outgrow it or stop needing it in ten years, you can sell it and recover a good part of what you paid.

Backup power only helps if it works the day you need it. When a big storm shows up in the forecast, the first thing our team thinks about is the customers who put off new batteries or skipped a service visit, and we hope their generators start. Batteries are the most common reason a generator fails to start, followed by transfer switch issues and fuel problems. Those are the things a routine maintenance visit is built to catch before an emergency.

Your generator has a controller too

Generator control panels have come a long way in the last five to seven years. They give our technicians far more information on site, and some units report to a remote monitoring portal or the building management system. That’s useful when you’re trying to catch a problem early. It also means the generator and transfer switch belong on the same list as your refrigeration controllers when you review what’s connected to the internet.

Ask your service provider and your IT team the same questions the federal agencies are asking about refrigeration. Which units can be reached remotely, who has the login, and when was the password last changed? Is the controller sitting on the public internet or behind your network’s firewall? Is the firmware current? We’re generator technicians, so the network side belongs with your IT people or a security vendor. We’re glad to walk them through what’s on the unit and how it’s wired.

Keep the local alarms working as well. A remote annunciator or a technician’s eyes on the panel during a monthly or quarterly visit doesn’t depend on anyone’s internet connection.

What to do this week

You don’t need a big budget to close most of these gaps. Start here.

  1. Make a list of every refrigeration controller, monitoring gateway and generator controller that connects to the internet, including anything a vendor set up for remote service.
  2. Change default passwords and ask each vendor how their remote access is secured. If nobody needs remote access to a unit, disconnect it.
  3. Set reasonable setpoint limits with alerts on any change outside them, which the federal fact sheet recommends. We’d also put a temperature alarm on critical coolers and freezers that doesn’t run through the refrigeration controller, so a hacked controller can’t hide a rising temperature.
  4. Write down how to run your refrigeration locally with the network cut, and have the people on each shift practice it once.
  5. Run your generator under real load. A weekly exercise run with no load won’t tell you much. A load bank test takes the unit up to 80 to 100% of its rated capacity for one to four hours and shows whether it can actually carry your building.
  6. Check the battery date. We recommend replacing generator batteries every 24 months on emergency standby units, even if they’d probably last longer.
  7. Check fuel level and fuel condition, and confirm the transfer switch actually transfers.
  8. Put a number on an outage. Add up the inventory in your coolers and freezers plus a day of lost sales, then compare it to the cost of a generator or a service agreement.

How Generator Source helps keep cold storage running

Generator Source sells, services, rents and buys commercial and industrial generators from 20kW to 4MW+. Our technicians work on every make and model, so whatever’s sitting behind your building, they’ve almost certainly seen it before.

Every service visit starts with our 31-point inspection, and we load bank test units so you know your generator will carry the load before the day it has to. Our preventive maintenance agreements exist to keep your generator from failing, and we track each unit’s service and load bank history so you can see it. If you need power faster than a new unit can ship, our rental fleet runs from 20kW up to 2MW and can bridge the gap. Our generator sizing tool is a good place to start if you’re adding backup power for refrigeration.

We pick up the phone nights and weekends.

BranchAddressEmergency line
Brighton, CO625 Baseline Rd, Brighton, CO 80603720-990-5106
Jacksonville, FL857 Eastport Rd, Jacksonville, FL 32218904-902-8116
Pensacola, FL1505 North W St, Pensacola, FL 32505904-902-8116
Austin, TX550 County Road 196, Georgetown, TX 78626737-437-8380

All branches are open 7AM to 4PM on weekdays, with on-call technicians covering after hours and weekends.

Frequently asked questions

What happened with the supermarket freezer hacks in Europe? In mid-October 2026, hackers took control of internet-connected refrigeration at hundreds of supermarkets in France, Belgium and the Netherlands, causing food losses and some fires. A second wave hit stores in at least seven European countries overnight on November 1 to 2, with some freezer setpoints raised to 50°C (122°F). Three French blood bank sites were targeted the same night, but alarms caught it before any blood products were lost.

Have refrigeration cyberattacks happened in the United States? In late August 2026, freezers at six or more U.S. military commissaries went into defrost mode overnight and spoiled food, and the Pentagon is treating those failures as a suspected cyberattack. On November 5, CISA, the FBI, HHS, USDA and DOT warned that attacks on refrigeration and cold chain monitoring systems are ongoing and that every organization that depends on them should assume it could be targeted. The agencies haven’t said whether any refrigeration systems in the U.S. have been targeted.

Can a backup generator stop a refrigeration cyberattack? No. A refrigeration hack changes the controller’s settings, and the fix is cutting remote access, running the system locally and moving product to equipment that isn’t connected. A generator keeps all of that equipment powered if utility power goes down during the response, and it protects you from outages caused by attacks on the grid or by weather.

Can a generator controller be hacked? Any generator controller, transfer switch or monitoring portal that connects to the internet should be treated like any other connected device. Change default passwords, keep it off the public internet, keep the firmware current and know which vendors have remote access. Your IT team or a security vendor should own the network side, and your generator service provider can tell you what’s on the unit.

How often should a commercial backup generator be load tested? Most facilities should load bank test at least once a year, and life safety systems covered by NFPA 110 have their own testing schedule. A load bank test runs the generator at 80 to 100% of its rated capacity for one to four hours, which tells you far more than a weekly no-load exercise run. It’s also the test most likely to expose a weak part before a real outage does.

What size generator does a grocery store or cold storage facility need? It depends on your refrigeration compressors, lighting, controls and anything else you want running during an outage, plus room for growth. A one-line diagram of your electrical system gives us total kW, amperage and voltage to size from. Undersizing can trip breakers and cause overload shutdowns, and oversizing leads to wet stacking, so it’s worth getting right. Our generator sizing tool is a good first step, and our team can take it from there.

Sources

Tags: