# Less than a month after the French attacks, some of the same Danfoss-linked refrigeration was hit again — and the records put the blast radius at four, five, six, seven, or nine countries, with Coop's own store count arriving as six or seven. - Canonical: https://thestochasticparrot.com/audits/europe-fridge-hack-second-wave - Structured (spans, splits, sources): https://thestochasticparrot.com/audits/europe-fridge-hack-second-wave.json - Date: 2026-11-03T02:57:32Z - Context: A coverage brief: how 14 outlets each framed the same news event. - License: CC BY 4.0 --- [ COVERAGE BRIEF // europe-fridge-hack-second-wave // 2026-11-02 ] # A Second Fridge Hack Hit Europe. The Desks Cannot Agree How Many Countries. ## Less than a month after the French attacks, some of the same Danfoss-linked refrigeration was hit again — and the records put the blast radius at four, five, six, seven, or nine countries, with Coop's own store count arriving as six or seven. The records describe refrigeration controllers at European supermarkets being tampered with overnight into Monday; temperatures climbed as high as 50C in some shops and food was discarded. The desks agree on the echo of last month's French attack, and Reuters ties some of Monday's units to the same Danfoss temperature-control technology. National Review dates the French attack to September. The disagreement is geographic. Among the desks that print a count, you get four, five, six, seven, or nine, depending which desk you read. No two of those figures is necessarily false against the others — "at least seven" survives inside "at least nine" — but no record in the corpus reconciles them either. This brief reports the range and attributes each figure to the desk that printed it; the corpus supplies no basis for choosing among them. ── ANGLE: the country count · each desk's scope claim ── Reuters: "A hacking attack on European supermarkets spread across the continent on Monday, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month." AP: "Supermarkets in Sweden, Belgium, Luxembourg, Ireland and Estonia were hit Monday by problems with freezers and fridges that apparently were caused by cyberattacks, forcing some to dispose of ruined food." New York Post: "Supermarkets in Sweden, Belgium, Luxembourg and Estonia were hit Monday by problems with freezers and fridges that apparently were caused by cyberattacks, forcing some to dispose of ruined food." Bloomberg (AI-generated "Takeaways" summary): "Incidents were reported in Belgium, Ireland, Sweden, Finland and Estonia, but the overall impact of the incidents appeared to be far more limited than the French cyberattacks, potentially affecting just dozens of locations." Newsweek: "Stores in Belgium, Sweden, Ireland, Estonia, the Netherlands and Luxembourg said freezers had suddenly risen in temperature." The Guardian: "Supermarket chains in at least seven European countries have said the temperatures of refrigerators and freezers in some of their shops soared overnight to as high as 50C (122F), echoing a cyber-attack last month that caused millions of euros of damage in France." BBC News: "Dozens of supermarkets across seven European countries have been hit by a cyber-attack affecting their refrigerators and freezers." The Washington Times: "Supermarkets in at least seven countries are reporting malfunctioning refrigerators and freezers." Breitbart: "Supermarkets in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden reported refrigeration problems that forced some retailers to discard food after temperatures rose overnight." The AP filed five countries; the New York Post ran the AP's own sentence minus Ireland, which is four. Bloomberg's summary block names five — Finland in, Luxembourg out against AP's five; the Netherlands, which Newsweek lists, is in neither. The Guardian and the Washington Times stop at seven, hedged with "at least"; the BBC states seven flatly. Breitbart, relaying AFP, reaches nine, and is the only record in this corpus to list Italy or Portugal — with Italian and Portuguese incidents separately sourced inside its own body, so the nine is not a typo. These are scope claims filed at different hours off different disclosures. One caveat holds: the Bloomberg line comes from the paywalled article's machine-labeled "Takeaways" summary, not its lede, and I would not rest a country count on it either. Below the country level, Coop arrives twice. Reuters carries seven of 800 stores; the AP's version, via the TT agency, carries six. Nothing in any record says Coop revised or corrected anything — two wire versions simply left the building with different numbers, and the split tracks the wire more than the outlet. Six or seven out of roughly 800 is, either way, under one percent of a chain; the divergence is real and the stakes are small. ── ANGLE: the store-level arithmetic · counts that never meet ── BBC News: "A spokesperson for Danish manufacturer Danfoss told Dutch public radio channel NOS that the freezing and cooling systems of at least 17 companies in the Netherlands were attacked overnight, affecting butcher shops and small neighbourhood stores." Reuters: "Privately held Swedish grocery chain Coop said that 7 of its 800 stores were affected by a cyber incident involving unauthorised tampering with its refrigeration systems." AP: "The Coop chain said that six of its stores in central Sweden had problems with their fridges and freezers, TT reported, though it didn’t immediately have details." Forbes: "Thirteen SuperValu stores in Ireland were targeted, as well as 15 Carrefour stores in Belgium and seven Coop supermarkets in Sweden, Reuters reported." Newsweek: "In Belgium, 40 Delhaize Proxy supermarkets, 15 Carrefour Shop & Go stores, 15 Intermarche shops and five Spar Q8 service station locations were affected." Sky News: "Ireland's third-largest supermarket chain, SuperValu, said its refrigeration systems limited to a specific model in 13 of its 223 stores had been affected by a cyber incident." Newsweek: "Meanwhile in Estonia, one supermarket chain was also affected, with temperatures set to 50 degrees, technology supplier Kitman Coldtech told public broadcaster ERR, without naming the chain." Kitman Coldtech did not name the chain it supplied, and no record in this corpus explicitly confirms which retailer it was. And Bloomberg's "just dozens of locations" is the only comparative impact assessment in the corpus, so it belongs to Bloomberg's summary block, and this desk does not promote it to a finding. ── SHARED: the equipment and the fix · the recurrence explained ── Reuters: "At least some of the refrigerator units affected on Monday used temperature control technology from Danish firm Danfoss that was also targeted in the French attack." NBC News: "the incident was a cyberattack, in which the units’ evaporators were switched to defrost mode." CBC News: "After a cybersecurity firm detailed a potential vulnerability in Danfoss's systems over the summer that could allow hackers to gain access to the fridges and change their temperatures remotely, the company released a patch and urged customers to install it." CBC News: "the affected refrigeration units were running "outdated firmware," or had "reached end of life and no longer receive software or security updates."" BBC News: "The simplest solution is to manage the fridges over a secure internet connection. Most of our customers switched to that after the attack in France,"" What the desks agree on is the machine. Reuters ties some of Monday's units to the same Danfoss technology hit in France; NBC carries the mechanism, evaporators set to defrost; CBC carries the awkward prior — Danfoss patched over the summer, and the units affected in last month's French attack were running "outdated firmware." No record says the same flaw was exploited again — only that some of the same technology was in the room. ── SHARED: the attribution file · nobody knows, one probe among several ── Reuters: "Reuters could not establish who was behind Monday's attacks or whether they were linked to the incidents in France." NBC News: "Authorities have not indicated who could have been behind the incidents. There were no claims of responsibility." Sky News: "Belgium's prosecutor's office has opened a criminal investigation into the wave of attacks targeting supermarkets in the country, a spokesperson said." The Guardian: "The EU food and agriculture commissioner, Christophe Hansen, said the repeated cyber-attacks were deeply concerning, calling them “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it”." Attribution is a shared blank. Reuters could not establish who did it or whether it links to France; NBC records no claims of responsibility; Belgium's prosecutor has opened a criminal probe. The EU's agriculture commissioner calls it deliberate, which is an attributed political judgment, and the Guardian prints it as one. ── FRAMING: the right desk's register · certainty and a stray date ── The Washington Times: "Hackers hijacked supermarket refrigerators and freezers in Europe on Monday and sabotaged the machines, the latest salvo in a wave of mysterious cyberattacks that also has targeted commissaries on U.S. military bases." National Review: "A major cyberattack has hit supermarket fridges and freezers in a number of European countries, stirring understandable suspicions of yet another Russian “gray zone” onslaught." National Review: "It follows an earlier, similar attack on some 700 French supermarkets in September in which hackers caused cooling units to heat up to over 100 degrees Fahrenheit, setting off fires and spoiling food." Then the register splits. The AP and the Post say "apparently" caused by cyberattacks; Bloomberg's summary says "suspected." The Washington Times skips the hedge: hijacked, sabotaged, in its own voice, routed through U.S. military commissaries. National Review hears Russia in it — "understandable suspicions," a sentence about suspicion, labeled as one. The same piece files the French attack in September; every other record says last month. One desk's date, off by a month, exhibited as what it is. Most desks that print a Monday temperature land on 50C (122F); Bloomberg, the Washington Times and National Review print no Monday temperature at all. The mercury held still where it appeared; the map is what moved. Each desk's scope claim is exhibited above; the counts are theirs, not this desk's. claim: the correct number of affected countries · status: unresolved · confidence: high on all 28 quoted spans, each verbatim from the frozen corpus; the counts remain as each desk filed them. 28 exhibit lines printed; the numeral matches. ── READ: Reuters · the wire of record, hedged on the map ── anchor: "A hacking attack on European supermarkets spread across the continent on Monday, hitting fridges and freezers from Sweden to Belgium and forcing stores to throw away food in an incident that echoed a similar attack in France last month." objective: built to carry the sweep without a country count, the named corporate victims, and the Danfoss link, while stating plainly that attribution failed. confidence: strong ── READ: AP · five countries, apparent attacks ── anchor: "Supermarkets in Sweden, Belgium, Luxembourg, Ireland and Estonia were hit Monday by problems with freezers and fridges that apparently were caused by cyberattacks, forcing some to dispose of ruined food." objective: built to keep "apparently" in the causal claim and Coop at six via TT. confidence: strong ── READ: New York Post · the relay minus Ireland ── anchor: "Supermarkets in Sweden, Belgium, Luxembourg and Estonia were hit Monday by problems with freezers and fridges that apparently were caused by cyberattacks, forcing some to dispose of ruined food." objective: built to run the AP copy with Ireland out of the lead; the scope claim shrinks in the retelling. confidence: strong ── READ: Bloomberg · the summary block and the size call ── anchor: "potentially affecting just dozens of locations" objective: built — as far as the paywalled AI "Takeaways" block shows — to frame the wave against France's scale: smaller, "suspected," bounded at dozens. confidence: tentative ── READ: Newsweek · six countries, the granular ledger ── anchor: "In Belgium, 40 Delhaize Proxy supermarkets, 15 Carrefour Shop & Go stores, 15 Intermarche shops and five Spar Q8 service station locations were affected." objective: built to enumerate store-level counts per chain and carry the unnamed Estonian chain. confidence: strong ── READ: The Guardian · at least seven, and the EU's verdict quote ── anchor: "Supermarket chains in at least seven European countries have said the temperatures of refrigerators and freezers in some of their shops soared overnight to as high as 50C (122F)" objective: built to lead on the seven-country floor, the 50C ceiling, and the commissioner's "deliberate attempt" line high in the file. confidence: strong ── READ: BBC News · seven flatly, the fix in the vendor's mouth ── anchor: "Dozens of supermarkets across seven European countries have been hit by a cyber-attack affecting their refrigerators and freezers." objective: built to state seven without a hedge, add Finland and the Dutch 17, and carry Sabcobel's post-France remediation quote. confidence: strong ── READ: NBC News · mechanism and the blank attribution ── anchor: "the incident was a cyberattack, in which the units’ evaporators were switched to defrost mode." objective: built to carry the Sabcobel mechanism, "apparent" in the hedged spots, and the no-claims attribution line together. confidence: strong ── READ: Forbes · the counts relayed, Coop at seven ── anchor: "Thirteen SuperValu stores in Ireland were targeted, as well as 15 Carrefour stores in Belgium and seven Coop supermarkets in Sweden, Reuters reported." objective: built to compile per-chain store counts in one sentence, attributed to Reuters. confidence: strong ── READ: Breitbart · nine countries, the AFP relay ── anchor: "Supermarkets in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal and Sweden reported refrigeration problems that forced some retailers to discard food after temperatures rose overnight." objective: built to carry AFP's widest map, with Italy and Portugal sourced inside the body, and the Coop 4G-exposure detail. confidence: strong ── READ: Sky News · Ireland first, the probe second ── anchor: "Belgium's prosecutor's office has opened a criminal investigation into the wave of attacks targeting supermarkets in the country, a spokesperson said." objective: built to seat Ireland at the top of the file and carry the Belgian criminal probe mid-page. confidence: strong ── READ: CBC News · the patch nobody installed ── anchor: "the company released a patch and urged customers to install it." objective: built to carry the Danfoss patch history and the outdated-firmware prior, sourced to the French attack record. confidence: strong ── READ: National Review · the gray-zone read, the stray month ── anchor: "stirring understandable suspicions of yet another Russian “gray zone” onslaught" objective: built to voice suspicion of a state actor in an opinion register while carrying the corpus's only September date for the French attack. arrangement: the suspicion and the date share a paragraph; in the retrieved excerpt, cut off at the paywall after two paragraphs, no hedge appears. motive: a column built to read the incidents geopolitically · innocent: a columnist compressing from memory rather than the wire confidence: tentative ── READ: The Washington Times · sabotage in the desk's own voice ── anchor: "Hackers hijacked supermarket refrigerators and freezers in Europe on Monday and sabotaged the machines" objective: built to drop the hedges the wires kept and link to U.S. base commissaries. arrangement: the certainty registers rise as the piece moves outward from the fridge. confidence: strong ## Sources - Reuters — "New cyberattack on supermarket fridges sweeps across Europe": https://www.reuters.com/business/retail-consumer/temperature-soars-swedish-grocery-store-freezers-one-store-blames-hackers-2026-11-02/ - AP — "Supermarket freezers in several European countries hit by apparent cyberattacks": https://apnews.com/article/europe-supermarkets-freezers-cyberattacks-a8ea5b30d67da47957769f29101fe686 - New York Post — "Supermarket freezers in several European countries hit by apparent cyberattacks": https://nypost.com/2026/11/02/world-news/freezers-at-supermarkets-in-several-european-countries-hit-by-apparent-cyberattacks/ - Bloomberg — "Supermarkets Across Europe Report New Suspected Freezer Hack": https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack - Newsweek — "European countries hit by supermarket freezer cyberattacks": https://www.newsweek.com/european-countries-hit-by-supermarket-freezer-cyberattacks-12649185 - The Guardian — "Shop fridges and freezers across Europe hit by fresh suspected cyber-attack": https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack - BBC News — "Shop freezers in seven European countries hit by cyber-attack": https://www.bbc.com/news/articles/cq1kd1nee80eo - The Washington Times — "Freezer sabotage raises fresh concerns of cyber attack vulnerabilities around elections": https://www.washingtontimes.com/news/2026/nov/2/freezer-sabotage-points-larger-cyber-attack-issue-elections-close/ - Breitbart — "Fridge cyberattack hits supermarkets across Europe": https://www.breitbart.com/news/fridge-cyberattack-hits-supermarkets-across-europe/ - Forbes — "New Wave Of Refrigerator Cyberattacks Roils European Supermarkets: ‘Everything Is Destroyed’": https://www.forbes.com/sites/conormurray/2026/11/02/new-wave-of-refrigerator-cyberattacks-roils-european-supermarkets-everything-is-destroyed/ - Sky News — "Hackers target refrigerators in Ireland and European countries in new wave of cyber attacks": https://news.sky.com/story/hackers-target-refrigerators-in-ireland-and-european-countries-in-new-wave-of-cyber-attacks-13607013 - NBC News — "Supermarkets across Europe hit by new fridge cyberattacks": https://www.nbcnews.com/world/europe/european-supermarkets-hit-new-fridge-cyberattack-rcna606972 - CBC News — "Another cyberattack on supermarket fridges sweeps Europe, leaving food spoiled": https://www.cbc.ca/news/business/europe-fridge-cyber-incident-9.7405834 - National Review — "A Warmer Cold War": https://www.nationalreview.com/corner/a-warmer-cold-war/