The ConversationNo. 11 · Convergence

Overnight on 1 to 2 November, attackers remotely heated supermarket freezers to around 50°C in seven countries. The lesson for security teams is that our own cameras and door controllers sit on the same exposed networks.

By TiNYg Editorial · 6 November 2026

It began in France in October and spread across Europe on the night of 1 November. Attackers accessed internet-exposed refrigeration controllers and changed temperature settings in supermarkets in Belgium, Luxembourg, Sweden, Ireland, the Netherlands, Estonia and Finland, with isolated cases reported in Germany and elsewhere. Ahold Delhaize reported around 40 affected stores in Belgium and Luxembourg; 13 SuperValu outlets were hit in Ireland. In some stores freezers reached 50°C and stock had to be destroyed. Belgian federal prosecutors opened an investigation.

France’s CERT-FR had already warned in October that specific refrigeration controllers and supervisory platforms from major vendors had been compromised. A study by Forescout the same month found nearly 13,000 cooling management services across 99 countries reachable from the public internet. Attribution is open. But as article 3 describes, it fits a pattern of cheap, deniable disruption against civilian supply chains.

The uncomfortable parallel

Security professionals may read this as a facilities or IT problem. It is ours. Modern CCTV cameras, video recorders, access control servers, intercoms, alarm panels and building management systems are networked computers. Too often they run old firmware, keep default passwords, are maintained remotely by integrators, and sit on flat networks connected to everything else.

In late October, the security firm Huntress reported a handful of incidents in September and October 2026 in which attackers used camera management software as their initial way into corporate networks, then established persistence. Critical vulnerabilities in mainstream CCTV products have been disclosed throughout the year.

A compromised physical security system gives an attacker three things: a live view of your premises and your guards, the ability to open doors or suppress alarms, and a foothold in the wider network. For a terrorist or hostile reconnaissance team, the first two are as valuable as any amount of site visits.

The professional view

Convergence is no longer a conference theme; it is an operational necessity. The question “who owns the patching of our cameras and door controllers?” too often has no answer, because facilities bought the kit, an integrator maintains it, and IT never saw it. Until that ownership is assigned, the security system remains a soft target.

What to do now

The Conversation is TiNYg’s members’ blog. Members and premium partners are invited to respond to, extend or challenge this article. Get in touch to contribute.

◀ Back to The Conversation newsletter: all 12 articles