← DOOMRADAR
Cyber & digital services38 / 100 · Doom score

Cyberattacks stopped supermarket refrigerators in Italy, spoiling food

Supermarkets in Sicily, Tuscany and Trentino reported refrigerators and freezers suddenly stopping, with food discarded after temperatures rose. Two pro-Russian groups claimed responsibility, but Il Post found no evidence confirming the link and noted major inconsistencies in the claim.

By DoomRadar · Published on DoomRadar . Updated .

Geographic context

Places in the report

France, ItalyFranceTunisiaAlgeriaBelarusUkrainePolandAustriaHungaryRomaniaLithuaniaGermanyBulgariaGreeceAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandItalyDenmarkUnited KingdomSloveniaSlovakiaCzech RepublicMoroccoBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoFranceItaly

Countries named in the cited reporting. Highlighting does not show the area affected. Map: Natural Earth.

How the effects could reach youConditional effectsConditional impact diagram. Reported development: Cyberattacks stopped supermarket refrigerators in Italy, spoiling food. shopping: Some chilled or frozen products may be unavailable at affected stores. Only if: The refrigeration-control systems must fail again or remain unavailable long enough for stock to spoil. security: Other internet-exposed industrial control systems could face similar targeting. Only if: Comparable systems remain exposed and inadequately secured, and the current incidents are shown to involve that technique. These are possible effects, not probabilities or a forecast.
A possible pathway, conditional on the factors shown.Reported basis: [1]

Based on one source with available article excerpts. Source-linked claims are not independent confirmation.

Event date: The most damaging attacks described in France occurred in mid-October; the Italian incidents are not given a specific date. [1]

What happened

NoName057(16) and Z-Pentest released a video claiming responsibility for attacks that affected France, Italy and other European countries. The claim did not identify the stores, explain the method of entry or provide dates that would allow the incidents to be matched to the groups. [1]

References for this detail (1)

The attribution is disputed for specific reasons. NoName057(16) is chiefly known for distributed-denial-of-service attacks, which normally overload online services without breaking into the victim's systems, while Z-Pentest is described as more focused on internet-exposed industrial systems and weak or unchanged passwords. [1]

References for this detail (1)

The most damaging French attacks took place in mid-October, but no group claimed them for weeks. Il Post said that delay was unusual because both groups typically claim their actions quickly, adding to doubts about whether the video reflects the actual perpetrators. [1]

References for this detail (1)

Context from the sources

Oleg Shakirov, a researcher who studies Russian hacker groups, identified an anomaly in the original video file made with artificial intelligence. The reporting also says other cybersecurity experts questioned the timing of the claim. [1]

Explore the sources and reporting timeline

1 source links · 1 domains

These counts describe the references, not independent confirmations. Different outlets can repeat the same original report.

Source timeline

Oldest to newest among the available source dates, not a chronology of the incident. Article publication dates come from the source; other recorded dates may reflect when a link was found.

  1. Article published: Nov 6, 2026, 6:14 AM UTC[1] Ci sono davvero hacker filorussi dietro gli attacchi ai frigoriferi dei supermercati?ilpost.itReferenced for: detail 1, detail 2, detail 3, detail 4, detail 5

Questions answered by the reporting

Is the pro-Russian attribution confirmed?

No. The groups provided no details proving which stores they attacked, how they entered the systems or when the intrusions occurred. [1]

What this could mean for you

Prices & shopping

Some chilled or frozen products may be unavailable at affected stores.

A failure in remotely managed refrigeration can raise temperatures and force supermarkets to discard spoiled inventory.

Reported basis: [1] · The possible effect is interpretation.

Depends on: The refrigeration-control systems must fail again or remain unavailable long enough for stock to spoil.

Safety

Other internet-exposed industrial control systems could face similar targeting.

Z-Pentest is described as specializing in intrusions into exposed industrial systems accessed through weak or unchanged passwords, though its role here is unproven.

Reported basis: [1] · The possible effect is interpretation.

Depends on: Comparable systems remain exposed and inadequately secured, and the current incidents are shown to involve that technique.

Possible consequences, not a forecast. Their relevance depends on your location and the conditions above.

For your country

Choose a country to check how this event could affect you.

What changes the outlook

Risk increases if…

Further supermarket refrigeration failures are documented and linked to the same control systems.

Technical evidence connects the attacks across France, Italy and other European countries to one operator.

Pressure eases if…

Operators restore affected refrigeration systems and verify that temperatures and remote controls are functioning normally.

Independent technical evidence identifies a different cause or disproves the claimed link to the two hacker groups.

Still unclear

The specific supermarkets, attack dates and entry method have not been established in the reporting.

It is unclear whether the same actor caused the incidents in France, Italy and other European countries.

Market implications

Market impact

Loading market analysis...
Sources (1)

References for the reported details. Separate links do not necessarily mean independent confirmation.

First tracked by DoomRadar: . AI-assisted analysis · . Based on linked headlines and available excerpts. Methodology · Report an error.