Hackers who disabled refrigeration systems in supermarkets across at least 12 European nations have demonstrated that everyday connected devices are vulnerable, and the head of the EU’s cyber security agency says home appliances could be next. Juhan Lepasaar, executive director of ENISA, delivered the warning at a press conference in Brussels on 11 November 2026.
The attacks, which began roughly two months ago, struck large cooling installations in France, Sweden, Belgium, Greece, Germany and Italy among others. Tons of meat, produce and other perishables had to be discarded after the cooling systems failed. Lepasaar said the intrusions exploited outdated software that lacked basic security standards, a problem that extends well beyond retail cold storage.
Today it’s a refrigerator. Tomorrow it could be Wi-Fi routers, and the day after that household appliances. The risk doesn’t stop here, he told reporters.
Lepasaar stressed that security cannot be an afterthought. Police, hospitals, transport networks and food distribution all rely on computer systems now, so vulnerabilities in any connected device threaten daily life directly. He called for significantly higher investment in cyber defenses across Europe, noting that many organizations cannot keep pace with the rapid evolution of attack tools, including artificial intelligence.
Both attackers and defenders are deploying AI, but the speed of technological change leaves gaps. Most major incidents last year stemmed from geopolitical tensions or financial motives. ENISA recommends timely software updates, security-by-design principles for manufacturers, and specialized expertise for industrial sectors to close those gaps.
Lepasaar’s agency continues to monitor the situation and coordinate responses across member states.
