30.10.2026
Cyber risk has long been associated with stolen data, ransomware demands and business interruption. Increasingly, however, cyber incidents are producing a different type of loss: the destruction of physical goods.
In our recent article, Spoilage: When cyber attacks turn up the heat, we explored how attacks against industrial systems, operational technology and business processes can quietly transform sellable inventory into waste. Recent events suggest this threat is evolving further.
What was once considered a theoretical scenario has now become a real-world demonstration of how cyber attackers can directly interfere with the systems responsible for keeping food safe.
When Refrigeration Becomes the Target
In October 2026, supermarkets across France reported a large-scale cyber incident affecting commercial refrigeration systems. According to multiple reports, attackers manipulated refrigeration controls, triggering continuous defrost cycles and causing temperatures in refrigerators and freezers to rise significantly. The result was widespread food spoilage, disruption to retail operations and potentially millions of euros in losses across affected stores. Reports indicate that hundreds of locations may have been impacted and that large volumes of fresh and frozen products were discarded as a precaution.
What makes this incident noteworthy is not simply the financial impact. It demonstrates that attackers no longer need to target traditional IT assets to create meaningful loss. By compromising systems that control environmental conditions, attackers can directly affect the physical world.
The attack mirrors scenarios that many organisations have historically considered unlikely. Refrigeration controllers, building management systems, warehouse automation platforms and industrial equipment are increasingly connected, remotely managed and integrated with wider corporate networks. Each connection extends operational efficiency but can also create new attack pathways.
For businesses reliant on temperature-sensitive goods, the consequences can be immediate. Once the cold chain is broken, many products cannot be recovered, regardless of how quickly systems are restored.
Spoilage Without Touching the Product
Historically, organisations have often viewed spoilage risk through an operational lens. Equipment failure, power outages and human error have been the primary concerns.
Cyber attacks introduce a fundamentally different challenge.
An attacker does not need to enter a facility, damage machinery or physically interact with inventory. A remote compromise of a control system can achieve the same outcome. Temperature setpoints can be altered, alarms disabled, sensor readings manipulated or automated processes interrupted. By the time operators identify the issue, the loss may already have occurred.
As operational technology continues to converge with traditional IT environments, the barrier between cyber incidents and physical consequences becomes increasingly blurred.
More Than a Refrigeration Problem
While refrigeration systems are an obvious target, the broader exposure extends across the entire food and manufacturing supply chain.
Cyber attacks can disrupt industrial control systems, production equipment, automated handling systems, warehouse management platforms, and transportation networks, resulting in consequences far beyond the spoilage of temperature-sensitive goods. In some cases, malicious actors may gain access to operational technology (OT) environments and manipulate process controls, causing machinery to malfunction, overheat, operate outside safe parameters, or suffer permanent damage.
Such incidents can lead to costly equipment repairs, unplanned downtime, employee safety risks, environmental impacts, and physical damage to facilities and infrastructure. As manufacturing operations become increasingly connected, the potential for a cyber event to translate into tangible physical losses represents a growing risk that businesses must consider alongside traditional data security concerns.
Recent cyber incidents demonstrate several different paths to spoilage:
Production Disruption
In March 2022, dairy producer HP Hood experienced a cyber incident that interrupted milk processing and intake operations. The company subsequently confirmed that some milk had to be disposed of following the disruption.
For industries working with raw ingredients that have limited processing windows, operational downtime can quickly become a spoilage event. Products continue to age even when production systems stop.
Manufacturing Bottlenecks
Following a ransomware attack against Schreiber Foods in 2021, industry reporting linked the disruption to challenges within dairy production and processing operations.
For dairy manufacturers, delays can be especially damaging. Raw milk is highly perishable and cannot simply be stored indefinitely while systems are restored. Even short interruptions can result in large volumes of unusable product and downstream supply shortages.
Logistics and Distribution Failures
Not every spoilage event originates inside a factory or warehouse.
Cyber-related disruptions affecting logistics providers can delay the movement of temperature-sensitive goods, reducing shelf life and increasing waste. The cyber disruptions reported by Arla Foods in 2025 highlighted how attacks on logistics systems can affect distribution networks across multiple regions.
For products with short shelf lives, a disruption measured in days rather than hours may be enough to turn inventory into waste.
Retail System Failures
The cyber attack against Marks & Spencer in 2025 demonstrated another pathway. While the incident was not publicly characterised as a refrigeration compromise, the disruption affected food availability, supply chain operations and store processes. The retailer subsequently reported increased food waste and additional logistics costs as manual workarounds were implemented.
This highlights an important distinction. Product spoilage does not always require direct manipulation of environmental controls. If organisations lose the ability to move, track, process, release or sell products efficiently, inventory losses can still occur.
A Growing Aggregation Concern
Perhaps the most significant lesson from the French supermarket refrigeration incident is the potential for aggregation.
Many organisations operate hundreds or thousands of locations using common hardware, software or managed service providers. A vulnerability within a widely deployed refrigeration platform, building management solution or industrial control product could create simultaneous loss across multiple sites.
From an insurer's perspective, this creates the possibility that a single cyber event could trigger property loss, spoilage, business interruption, supply chain disruption and reputational damage across an entire portfolio.
From an organisational perspective, it raises important questions around concentration risk, third-party dependencies and operational resilience.
Building Resilience Against Cyber-Driven Spoilage
As cyber attacks increasingly target operational processes rather than just information systems, organisations should consider whether existing controls adequately address spoilage scenarios.
Areas of focus may include:
- Segmentation between IT and operational technology environments.
- Strong authentication and access controls for refrigeration and environmental management systems.
- Independent monitoring of critical temperature thresholds.
- Alerting mechanisms that operate separately from primary control platforms.
- Robust patch and vulnerability management for operational technology.
- Third-party supplier assurance and remote access governance.
- Incident response plans that specifically account for product spoilage and cold-chain failures.
Most importantly, organisations should understand how quickly a cyber incident could transition from an IT problem into a physical loss event.
Beyond Data and Downtime
Cyber attacks are increasingly capable of producing consequences that extend well beyond the digital world.
The destruction of inventory, interruption of food supply chains and degradation of physical products are no longer hypothetical outcomes. Whether through compromised refrigeration controls, disrupted production environments or paralysed logistics networks, cyber incidents are becoming capable of generating losses once associated only with operational failures.
The question is no longer whether cyber attacks can cause spoilage.
The question is how many organisations have recognised that their inventory may now be just one compromised system away from becoming waste.
Get in touch
Find out more about physical damage and cyber risk and about our BCAP product
