Israel Warns Supermarkets Over Cyberattacks on Food Systems

Israel's National Cyber Directorate urged supermarket chains, food companies and logistics centers on Monday to secure their refrigeration and freezer systems after a wave of cyberattacks across Europe. The warning describes a threat to the equipment that keeps food from spoiling, while placing the immediate burden of prevention on companies and asking them to report security checks and suspicious activity to the directorate.

The attacks were reported in Europe, not in Israel. The directorate issued a warning about potential cyberattacks; the account doesn't say that Israeli supermarket systems had been breached.

When Cooling Systems Become a Target

Hackers reportedly gained remote access to supermarket temperature-control systems, manipulated cooling settings and activated defrost cycles. Those changes caused large quantities of food to spoil. The attacks reportedly brought significant financial losses and operational disruptions, and some incidents also damaged equipment and caused fires.

The reported target wasn't a checkout system or a customer database, but the machinery controlling refrigeration. The consequences described reach beyond a company's balance sheet: food spoils, operations are disrupted, and equipment can be damaged or catch fire. The account doesn't name the affected European chains, identify the countries where the incidents occurred, or give a count of attacks or losses.

The directorate's response is a set of instructions for the companies operating those systems. It recommended disconnecting control systems from the internet, replacing default passwords and updating outdated systems to address security vulnerabilities. It also advised securing remote access with multi-factor authentication and installing independent alert systems to detect unusual temperature changes.

The Security Apparatus and the Reporting Line

The directorate asked companies to report the results of security checks and any suspicious activity to its hotline. That makes the state agency the destination for information about companies' checks and possible incidents. The account doesn't say what the directorate does with those reports, whether companies must submit them, or whether any action has been taken against firms that leave systems vulnerable.

The recommendations focus on access and detection: limit internet connections, replace default passwords, update systems, add authentication and monitor temperatures independently. These are specific measures, not a claim that the threat has been eliminated. The warning itself describes possible attacks and calls for immediate action; it doesn't report that every company has followed the advice or that the proposed safeguards have been tested against the attacks described.

What the Warning Doesn't Establish

No aid organization, human rights group, workers' group or grassroots response appears in the account. It describes a directorate addressing companies, and companies being asked to inspect systems and report back. It doesn't say whether workers or shoppers were consulted, or what support was offered to people affected by spoiled food or disrupted operations.

The account also gives no attribution for the hackers, no motive, and no claim that a government directed the attacks. It provides no evidence of an attack inside Israel. Those limits matter: a warning about potential risk is not proof of a local breach, and the reported European incidents don't identify who carried them out.

For now, the described chain is spare: hackers reportedly accessed control systems in Europe, temperature settings changed, food spoiled, and the National Cyber Directorate told companies how to harden their systems and where to send reports. The machinery is corporate; the warning and reporting channel are state-run.