Real-life Cyberattacks Cases

In October 2026, hundreds of supermarkets in France were affected by a cyberattack that disrupted the operation of refrigeration systems, resulting in food losses and financial damage. The attackers managed to manipulate the equipment remotely, changing operating settings and storage temperatures, putting fresh and frozen products at risk. There were also reports of fires breaking out. Subsequently, similar attacks were identified in other European countries, namely Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden.

In addition to the financial losses, the incidents forced affected stores to dispose of food and deploy technical teams to assess the damage and restore the equipment to normal operation. These events demonstrate how a digital intrusion can extend beyond the IT environment and directly compromise the operation of physical systems, with consequences for business operations and safety.

In Portugal, the Mosqueteiros Group confirmed that some Intermarché stores had been affected by incidents involving a cyberattack reportedly targeting an external service provider responsible for managing refrigeration systems. According to the company, the necessary procedures were implemented to minimise the impact and restore the equipment to normal operation, with the supply chain remaining unaffected.

The occurrence of similar incidents across several European countries highlights the risks associated with the growing connectivity of operational technology (OT) systems. The use of internet-connected equipment and remote management platforms helps optimise operations, but also increases the attack surface. Known vulnerabilities, outdated equipment, weak credentials or inadequately secured remote access can allow cybercriminals to take control of these systems, causing disruptions with a direct impact on physical operations.

Although there is still no confirmation that all the incidents are linked to the same perpetrators or a single coordinated campaign, the similarities in the methods used warrant increased attention to the security of OT environments. It is therefore essential to strengthen network segmentation, control remote access, monitor equipment and assess the security of external service providers.

Are we witnessing a growing trend in attacks targeting OT systems? The possibility of this threat spreading to other systems and sectors, such as energy, industry, transport and water supply, should not be underestimated. The protection of these environments must keep pace with the growing interconnection between the digital world and physical infrastructure, preventing a cyber intrusion from becoming a threat to the operation of essential services.