The Cold War 2.0: Hackers Turn Supermarket and Military Freezers Into Ovens

In one of the strangest and most alarming cyber incidents in recent memory, security agencies and the Pentagon are investigating a wave of mysterious, coordinated digital break-ins targeting commercial refrigeration systems. Rather than engaging in traditional data theft or ransomware attacks locking up computer screens, malicious actors pulled off a physical-world disruption: they hacked into refrigeration units and forced them to heat up to a staggering 50°C (122°F).

The French Supermarket Catastrophe The scale of this vulnerability first came to light in mid-October 2026, when a massive, coordinated cyberattack struck over 350 supermarkets across France. Major retail chains—including Carrefour, Intermarché, Monoprix, and Coopérative U—were hit overnight. Instead of simply cutting power, the hackers overrode digital temperature controls, turning cold-storage units into literal ovens.

• The Damage: Millions of euros worth of fresh and frozen food stock were completely destroyed.
• Fires and Overheating: The heat spikes were so intense that some refrigeration machinery malfunctioned, overheated, and actually caught fire.
• The Vector: French cyber agency ANSSI and security bulletins later pointed to compromised, obsolete, or poorly secured industrial controllers (such as devices from brands like Danfoss, Copeland, and Dixell) that had been exposed directly to the public internet.

The Pentagon Probe

U.S. Military Bases Targeted Following the chaos in Europe, the focus shifted sharply to the United States. The Pentagon and a specialized unit of U.S. Cyber Command—working alongside the Army’s Criminal Investigation Division—began probing a similar spate of bizarre freezer malfunctions that struck six U.S. military base commissaries (ranging from California to Rhode Island and Fort Huachuca in Arizona). In late August, commissaries reported that food inventory had mysteriously spoiled overnight because units had secretly switched into “defrost/heating mode”. While investigators are still working to officially link the U.S. base incidents to the French cyberattacks, the operational similarities have set off alarm bells at the highest levels of national security.

Who Are the Hackers?

As of now, no specific hacker group, state-sponsored actor, or individual has publicly claimed responsibility or been formally named by investigators. However, cybersecurity experts note that the attacks exploit vulnerabilities in Operational Technology (OT) and industrial internet-of-things (IoT) devices. Many commercial refrigeration systems rely on legacy software, default passwords, or remote-management gateways that were left exposed online by maintenance contractors—making them easy targets for script kiddies, rogue syndicates, or state-backed cyber-saboteurs testing critical infrastructure vulnerabilities.

Historical Precedents

While using freezers as weapons feels like science fiction, digital attacks on physical infrastructure have a growing history. In prior instances documented in the United States, federal prosecutors in Los Angeles indicted members of a hacking group for launching a cyber disruption that crippled refrigeration controls at a major American meatpacking facility, successfully ruining thousands of pounds of meat. Similar digital interference with outdated cold-storage controllers has previously been observed in international contexts like Russia and Israel, reflecting a broader trend of industrial control system (ICS) exploits—ranging from the Stuxnet worm targeting centrifuges to water treatment facility hacks—that prove modern cyberattacks can cause tangible, physical destruction without touching a single office computer.

Regarding accountability for these past and present threats, the perpetrators behind the major U.S. meatpacking facility hacks were successfully identified, investigated, and prosecuted by federal authorities in Los Angeles. However, for the widespread French supermarket and U.S. military base incidents, no specific groups have yet been caught or publicly unmasked as investigators continue tracing the exposed legacy IoT firmware and default credentials.

The Worst-case Scenario

The weaponization of everyday physical infrastructure. A widespread, synchronized hack targeting cold-chain logistics could intentionally starve urban centers, ruin national food reserves, and trigger massive economic panic. By targeting military base commissaries and supply chains, adversaries can degrade troop morale, compromise logistical self-sufficiency, and test vulnerabilities in critical defense installations. Ultimately, the worst-case scenario involves hostile states mapping out and embedding logic bombs into global IoT networks—ready to simultaneously fry food supplies, hospital blood banks, and pharmaceutical cold storage during a geopolitical crisis. As investigations continue, governments are racing to force industrial operators to pull vulnerable equipment off the public internet and patch outdated firmware before the next “cool” gadget is turned into a weapon.