Cyberattacks disrupted supermarket refrigeration in Italy, but hacker claims remain unproven
Supermarkets in Sicily, Tuscany and Trentino discarded spoiled food after remotely managed refrigerators stopped working. NoName057(16) and Z-Pentest claimed responsibility, but Il Post found no evidence tying them directly to the incidents.
By DoomRadar · Published on DoomRadar . Updated .
Places in the report
Countries named in the cited reporting. Highlighting does not show the area affected. Map: Natural Earth.
How the effects could reach youConditional effects
Based on two sources with available article excerpts. Source-linked claims are not independent confirmation.
What happened
Supermarket refrigerators and freezers in Sicily, Tuscany and the province of Trento reportedly stopped working suddenly. Temperatures rose, and store managers had to discard food that had spoiled. [2]
References for this detail (1)
- Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.it · Article published: Nov 6, 2026, 6:14 AM UTC
The targeted equipment was managed through software that allows operators to monitor and control refrigeration parameters remotely. The incidents therefore affected a connected control system rather than only a public-facing website. [2]
References for this detail (1)
- Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.it · Article published: Nov 6, 2026, 6:14 AM UTC
NoName057(16) and Z-Pentest released a video claiming responsibility for attacks in France, Italy and other European countries. The video did not identify the stores, describe the intrusion method or state when the attacks occurred. [2]
References for this detail (1)
- Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.it · Article published: Nov 6, 2026, 6:14 AM UTC
Il Post reported that the most damaging incidents in France occurred in mid-October and went unclaimed for weeks. Security experts cited that delay as unusual because both groups generally claim their actions quickly. [2]
References for this detail (1)
- Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.it · Article published: Nov 6, 2026, 6:14 AM UTC
The attribution is disputed for technical as well as timing reasons. NoName057(16) is mainly known for DDoS attacks, while Z-Pentest has been associated with intrusions into internet-exposed industrial systems using weak or unchanged passwords. [2]
References for this detail (1)
- Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.it · Article published: Nov 6, 2026, 6:14 AM UTC
Context from the sources
The alleged perpetrators have different known operating profiles: DDoS attacks overwhelm a target with requests, while industrial-system intrusions involve accessing exposed control systems. That distinction makes the refrigeration claim harder to assess from the video alone. [2]
The wider reporting describes shifting alliances and renamed pro-Russian hacker groups, including attacks carried out through compromised computers controlled remotely. That background helps explain why attribution can be difficult, but it does not prove responsibility for the supermarket incidents. [1]
Explore the sources and reporting timeline
2 source links · 2 domains
These counts describe the references, not independent confirmations. Different outlets can repeat the same original report.
Source timeline
Oldest to newest among the available source dates, not a chronology of the incident. Article publication dates come from the source; other recorded dates may reflect when a link was found.
Questions answered by the reporting
What remains unverified about the attacks?
The groups’ video did not identify the stores, explain how they entered the systems or give the attack dates, leaving their direct responsibility unconfirmed. [2]
What this could mean for you
Perishable food may be unavailable or discarded at affected stores.
If attackers or another cause disable remotely managed refrigeration, temperatures can rise and spoilage can force stores to remove stock.
Reported basis: [2] · The possible effect is interpretation.
Depends on: A similar disruption must affect additional supermarkets or persist before wider availability problems emerge.
Retail operators may face interruptions in connected equipment and monitoring systems.
Internet-exposed industrial controls can be targeted directly; Z-Pentest is described as specializing in such intrusions.
Reported basis: [2] · The possible effect is interpretation.
Depends on: Attackers would need access to additional exposed systems, and the connection to this incident remains unproven.
Possible consequences, not a forecast. Their relevance depends on your location and the conditions above.
For your country
Choose a country to check how this event could affect you.
What changes the outlook
Risk increases if…
Further confirmed incidents involving remotely managed refrigeration or other supermarket control systems.
Technical evidence linking the claimed groups to the Italian disruptions, especially evidence identifying affected stores or the intrusion method.
Pressure eases if…
Independent forensic evidence rules out the claimed groups or identifies a different cause.
Retail operators restore affected refrigeration controls and prevent further temperature-related spoilage.
Still unclear
The identity of the intruder or intruders has not been independently established.
The number of stores affected and the total value of discarded food are unclear.
Market implications
Market impact
Sources (2)
References for the reported details. Separate links do not necessarily mean independent confirmation.
Available excerpt
Gruppi di hacker filorussi si sono uniti, divisi e riorganizzati sotto sigle diverse, cambiando più volte nome. Le loro trasformazioni hanno reso più difficile per…A short excerpt from our source record; open the original for the full article.
Available excerpt
Nella rivendicazione diffusa da due gruppi ci sono alcune cose che non tornano Due gruppi di hacker filorussi, NoName057(16) e Z-Pentest, hanno diffuso un video…A short excerpt from our source record; open the original for the full article.
First tracked by DoomRadar: . AI-assisted analysis · . Based on linked headlines and available excerpts. Methodology · Report an error.