A new wave of suspected cyberattacks targeting supermarket cooling systems has raised an urgent question: How should retailers ensure the continued operation of necessary remote services while protecting critical operational technologies ( OT )?
Copenhagen, Denmark, November 3, 2026 / PRNewswire / -- Several European supermarket chains have recently reported that their refrigeration systems have been subjected to a new round of suspected cyberattacks. Just a few weeks ago, hackers were alleged to have controlled the cooling equipment at hundreds of stores in France, resulting in a large loss of food.
The latest incidents, which occurred in Sweden, Belgium, and Luxembourg respectively, highlight an increasingly severe challenge faced by retailers: the operational technologies responsible for ensuring food safety ( OT ) are increasingly connecting to external systems and service providers. When such connections lack adequate protection, they can pose potential security risks.
Unlike traditional cyberattacks that mainly aim to steal data or disrupt IT services, attacks targeting operational technologies can immediately result in physical consequences. Once the cooling system fails, it may lead to food spoilage, business interruptions, significant financial losses, and potential food safety risks.
"These incidents indicate that network security is no longer just about protecting information. When hackers gain access to operational technology systems, the consequences can be physical," said Michael Ferdinandsen, CEO of Danish industrial network security company Secomea. The company specializes in secure remote access.
"For retailers, the question is not whether they need remote connectivity. They definitely do. The issue is whether they have sufficient control over who can access the devices, what they can access, and what is allowed to be done."
The challenge lies not in connection, but in access control.
Modern refrigeration systems require remote connectivity to operate efficiently. External service providers and maintenance technicians utilize this connection to monitor temperatures, respond to alarms, diagnose faults, and provide maintenance for equipment at hundreds or even thousands of sites.
Such connections are crucial for minimizing response times and avoiding device failures. However, they also create potential entry points for hackers, especially when the operating devices are directly exposed to the internet or when remote users gain access beyond what is necessary.
For supermarket chains that manage multiple stores, refrigeration systems, and external service providers, the challenges are even more complex. Different suppliers may use various access methods, which makes it more difficult for IT and security teams to consistently control who can connect to critical infrastructure.
"Many companies have invested heavily in protecting the IT environment, but operating equipment often presents another type of challenge," said Michael Ferdinandsen.
The original intention of designing these systems was for them to operate reliably for many years, even decades. They may not have been designed in accordance with today's requirements for connectivity and network security. If traditional remote access methods are applied without taking these differences into account, it could lead to unnecessary risks.
Protect access without interfering with operations.
Protecting the refrigeration system does not necessarily mean that remote connections must be canceled. Retailers need a method that allows external technicians to perform necessary maintenance while ensuring that access to operating equipment is controlled and traceable.
A secure remote access solution designed specifically for the OT network can address this challenge by controlling connections at the individual device level, rather than granting users generalized access to the operational network.
The native OT architecture of Secomea can establish secure connections for operational devices through edge gateways close to the assets. Centralized access management, fine-grained permissions, and audit logs enable enterprises to control who can connect, which devices can be accessed, and at what times.
This method has already been implemented in the field of commercial refrigeration. In Denmark, a refrigeration system monitoring expert AK-Centralen uses Secomea technology to provide remote monitoring for the cooling systems of over 1,500 supermarkets. The secure connection enables the company to maintain critical monitoring and maintenance operations without the need to directly access the internal networks of the supermarkets.
This case demonstrates that efficient remote maintenance and stronger network security measures can be implemented in parallel.
Operational resilience depends on visibility and control.
The issues arising from the latest incidents are far more than just related to supermarket refrigeration systems. From building management and energy systems to production equipment and logistics infrastructure, businesses are increasingly dependent on networked operational devices that are maintained by external experts.
As these environments become increasingly interconnected, enterprises need a consistent approach to manage third-party access, limit permissions to the devices that users truly need, and maintain visibility into remote activities.
Secure remote access is part of this protection, in addition to which there is also vulnerability management, network segmentation, system updates, and continuous monitoring.
"Enterprises should not be forced to make a choice between maintaining business continuity and ensuring security," Michael Ferdinandsen summarized.
The goal is to provide the remote support necessary for modern operations, while also offering the governance and control required by IT and the security team. This is particularly important when the relevant systems have a direct impact on physical operations.
Although the specific methods of the latest suspected attacks are still under investigation, these incidents once again remind people that security vulnerabilities in operational environments can rapidly evolve into business continuity issues.
About Secomea
Secomea is a Danish industrial network security company that specializes in providing secure remote access solutions for operational technology (OT). The solutions offered by Secomea are designed specifically for industrial environments, enabling companies to securely connect to critical equipment. At the same time, they provide centralized governance, fine-grained access control, and remote access visibility for IT and security teams.
By combining secure operations with corporate security requirements, Secomea helps organizations enhance operational resilience, reduce network risks, and always maintain control over third-party access.
Designed specifically for operational services. Approved by the IT department.
