India’s refrigeration, cold-storage and commercial cooling infrastructure could face growing cybersecurity risks as businesses increasingly connect temperature-control equipment to digital networks. Experts have warned that security safeguards for operational technology (OT) systems managing India’s cooling infrastructure remain at an early stage. The concerns have intensified following a series of cyberattacks on supermarket refrigeration systems across Europe, where hackers reportedly manipulated cooling controls, raised freezer temperatures and disrupted food storage operations.
The European incidents have demonstrated how cyberattacks can cause physical and financial damage without stealing customer information or disrupting conventional computer networks. Supermarkets in countries including Sweden, Belgium, Estonia, the Netherlands, Finland and Luxembourg reported refrigeration disruptions during the latest wave of attacks in November 2026. Similar incidents affected hundreds of supermarkets in France in October. Although no comparable Indian supermarket attack has been confirmed, experts warn that increasingly connected cooling infrastructure creates potential entry points for cybercriminals.
Why India’s Cooling Systems Face Cybersecurity Risks
India’s cooling infrastructure includes supermarket refrigeration, industrial chillers, pharmaceutical storage facilities, food-processing plants, warehouses and large cold-storage facilities.
Many modern systems use connected sensors, controllers and building management software to monitor temperatures, regulate cooling equipment and identify technical problems.
These systems allow businesses to manage refrigeration remotely, improve energy efficiency and monitor equipment across multiple locations.
However, connecting operational equipment to the internet also introduces cybersecurity risks.
If refrigeration controllers are accessible through poorly protected internet connections, attackers may attempt to gain unauthorised access and manipulate temperature settings, disable alarms or interfere with equipment operations.
The problem becomes more complicated when businesses depend on third-party contractors to install and remotely manage their refrigeration infrastructure. Security responsibilities can become divided between equipment manufacturers, service providers and the businesses operating the facilities.
Experts told The Economic Times that cybersecurity safeguards for India’s operational technology systems remain at an early stage, raising concerns about whether businesses are adequately prepared for attacks targeting physical infrastructure.
What Happened in European Supermarkets?
The warning follows two waves of cyberattacks targeting supermarket refrigeration systems across Europe.
During October 2026, hundreds of supermarkets in France experienced disruptions after attackers reportedly accessed refrigeration management systems and manipulated cooling settings.
French authorities said approximately 700 supermarket locations were affected. Some refrigeration units reportedly reached temperatures of around 50°C, forcing retailers to discard large quantities of fresh and frozen food.
A second wave of incidents was reported in early November across several European countries.
Supermarkets in Sweden, Belgium, Estonia, Finland, Luxembourg and other countries reported problems with refrigeration equipment. Attackers reportedly changed temperature settings and switched systems into defrost or heating modes.
The incidents demonstrated how remotely accessible industrial equipment could become a target for cybercriminals.
| European incidents | Reported details |
|---|---|
| France | Approximately 700 supermarket locations affected in October |
| Sweden | Supermarket refrigeration systems disrupted |
| Belgium | Multiple supermarket locations reported incidents |
| Estonia | Refrigeration technology provider reported an affected retail location |
| Finland | Supermarket refrigeration disruptions reported |
| Luxembourg | Retail refrigeration incidents reported |
| Netherlands | Refrigeration-related disruptions reported |
The attackers have not been publicly identified, and authorities have not established whether all incidents were connected.
The incidents also highlight the vulnerability of older refrigeration controllers, particularly equipment with outdated software, exposed internet interfaces and weak authentication.
How Hackers Can Manipulate Refrigeration Systems
Commercial refrigeration systems use operational technology to control physical equipment.
Unlike conventional information technology, which primarily processes and stores digital information, OT systems interact directly with machines, sensors and industrial processes.
A typical connected refrigeration system includes several components:
- Temperature sensors: Measure the temperature inside refrigerators, freezers and cold-storage rooms.
- Controllers: Process sensor information and regulate cooling equipment.
- Remote management software: Allows operators or contractors to monitor and adjust settings.
- Communication networks: Connect controllers to monitoring platforms and other systems.
- Alarm systems: Notify operators when temperatures move outside acceptable limits.
If attackers gain access to a vulnerable controller, they may be able to change temperature settings, activate defrost cycles or interfere with monitoring functions.
For a supermarket, even a few hours of disrupted refrigeration can create substantial financial losses.
For pharmaceutical warehouses, hospitals and food-storage facilities, the consequences could be more serious because temperature-sensitive products may become unusable.
The European attacks demonstrate that cyberattacks against operational technology can directly affect physical operations and supply chains.
India’s Cold-Storage Infrastructure Adds to the Concern
India has an extensive cold-chain ecosystem supporting agriculture, food processing, pharmaceuticals and retail distribution.
According to a FICCI-Grant Thornton Bharat report cited by BusinessToday, India had approximately 40.22 million tonnes of cold-storage capacity across 8,815 facilities as of June 2025.
These facilities help preserve perishable products, including fruits, vegetables, dairy products, meat, fish and pharmaceutical supplies.
As businesses introduce digital monitoring and remote management, cybersecurity becomes an increasingly important part of protecting this infrastructure.
A compromised refrigeration system could potentially affect:
- Food storage: Spoilage of dairy products, meat, seafood, fruits and vegetables.
- Pharmaceutical warehouses: Temperature-sensitive medicines could become unusable.
- Vaccine storage: Disruptions could affect temperature-controlled medical supplies.
- Retail operations: Supermarkets could face inventory losses and temporary operational disruptions.
- Industrial facilities: Cooling failures could interrupt manufacturing and processing operations.
However, there is an important distinction: India has not been confirmed as a victim of the European-style supermarket refrigeration attacks. The concern is about potential exposure as connected cooling systems become more common.
Cybersecurity Data Shows Risks Across Indian Building Automation
The broader cybersecurity situation in India also provides reasons for businesses to examine their operational technology security.
According to Kaspersky’s Q1 2026 industrial cybersecurity report, malicious objects were blocked on 18.62% of industrial control system computers in India during January-March 2026.
Building automation recorded the highest share among the Indian sectors examined, at 20.7%.
| Indian industrial sector | Share of ICS computers where malicious objects were blocked |
|---|---|
| Building automation | 20.7% |
| Oil and gas | 20.1% |
| Manufacturing | 18.6% |
| Engineering and ICS integration | 18.5% |
| Biometrics | 18.2% |
| Electric power | 15.3% |
| Construction | 12.4% |
These figures do not mean that the same percentage of refrigeration systems was hacked. They measure the share of industrial control system computers on which security solutions blocked malicious objects.
However, the findings illustrate the wider cybersecurity challenges affecting connected industrial and building infrastructure in India.
As more businesses adopt automated cooling, monitoring and energy-management systems, securing these technologies will become increasingly important.
How Businesses Can Protect Cooling Infrastructure
Cybersecurity experts recommend treating refrigeration controllers and other operational technology devices as critical business assets rather than ordinary connected appliances.
Businesses can reduce exposure through several measures.
1. Remove unnecessary internet access
Refrigeration controllers should not be directly exposed to the public internet unless there is a specific operational requirement and appropriate security protection.
2. Use secure remote access
Businesses should use protected connections such as virtual private networks (VPNs), multi-factor authentication and restricted administrator access for remote maintenance.
3. Change default passwords
Default credentials and weak passwords can make internet-connected equipment easier to compromise. Businesses should use strong, unique credentials and regularly review access permissions.
4. Update software and firmware
Manufacturers regularly release security updates to address vulnerabilities. Businesses should maintain an inventory of equipment and ensure that supported devices receive necessary updates.
5. Separate operational technology networks
Refrigeration controllers should be separated from general corporate IT networks. Network segmentation can reduce the possibility of attackers moving from one compromised device to other systems.
6. Maintain independent temperature monitoring
Businesses should consider independent monitoring and alarm systems so that a compromised refrigeration controller cannot become the only source of temperature information.
7. Monitor third-party access
Companies should review how contractors and equipment suppliers access refrigeration systems. Remote access should be limited to authorised personnel and monitored for unusual activity.
These measures can help reduce the likelihood and impact of cyberattacks, although no single security measure can eliminate every risk.
The Bigger Picture
The European refrigeration attacks highlight a growing cybersecurity challenge: protecting physical infrastructure that is increasingly controlled through internet-connected software.
India’s digital transformation is extending beyond computers, smartphones and cloud services into factories, warehouses, hospitals, buildings and food supply chains. Cooling infrastructure is an important part of this transition because temperature control directly affects food safety, medicine storage and industrial operations.
For businesses, cybersecurity can no longer be limited to protecting customer databases and office computers. Operational technology requires similar attention because a digital intrusion can produce real-world damage. India’s growing cold-chain industry will need stronger security practices as remote monitoring and automated equipment become more widespread.
Looking Ahead
The immediate priority for Indian businesses should be identifying refrigeration controllers and other cooling equipment that can be accessed remotely. Companies will need to review software updates, passwords, contractor access and network separation before similar vulnerabilities become a larger operational problem. Independent temperature monitoring and incident-response planning will also be important.
The European incidents offer a warning about how weaknesses in connected industrial equipment can disrupt essential services and create financial losses. Although no comparable attack on Indian supermarket refrigeration systems has been confirmed, the country’s expanding cold-storage and automated infrastructure makes preventive cybersecurity increasingly important. Protecting cooling systems will be an important part of securing India’s wider food, pharmaceutical and industrial supply chains.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
