The Fridge Hack: Why Cyber Attacks on Supermarkets May Not Be Covered by Cyber Insurance

A wave of cyber-sabotage targeting European supermarket refrigeration units has exposed a critical coverage gap between standalone cyber policies and traditional property programs. As attackers manipulate internet-connected controllers to spoil stock without demanding ransoms, brokers and carriers must reconcile how physical losses triggered by digital interference are indemnified within existing policy frameworks.

What was announced

A series of coordinated attacks on operational technology (OT) has impacted retailers across the continent, beginning in France during October and expanding significantly on 2 November. The geographical spread of the incidents now includes Belgium, Luxembourg, Ireland, Sweden, Finland, Estonia, the Netherlands, Germany, Italy, and Greece. Unlike typical ransomware events, these attacks involved no data theft or financial demands; instead, they focused on pure sabotage by accessing refrigeration controllers reachable via the public internet.

The attackers remotely altered settings on industrial cooling units, in some instances shifting temperatures from a standard -27°C to over 50°C. This resulted in total stock spoilage by the time supermarket staff arrived for morning shifts. In France, the manipulation of these controllers reportedly led to physical fires within some stores. The incidents have highlighted a complex "silent cyber" dilemma for the insurance industry. While standalone cyber policies are designed to handle incident response, forensic investigations, and system restoration, they frequently exclude physical loss or damage to tangible property, such as ruined inventory.

Furthermore, traditional property policies are increasingly being restricted by cyber exclusions, most notably the LMA5400 clause, which removes coverage for losses caused by the malicious use of a computer system. While some retailers may look to "deterioration of stock" or spoilage extensions within their property programs, these often require a specific trigger such as a mechanical breakdown or accidental failure, which may not be technically met by a deliberate, remote setting change.

"Over the past month, supermarkets across Europe have opened in the morning to find their freezers running hot. France was hit first, in October. On 2 November, a second wave reached Belgium, Luxembourg, Ireland, Sweden, Finland, Estonia and the Netherlands, and Germany, Italy and Greece followed. The attackers accessed refrigeration controllers reachable from the internet. They switched units to defrost or heating mode and, in some cases, moved the setting from -27°C to over 50°C. By the time staff arrived, the stock was ruined. In France, some stores had fires."

Rupert Hills, Partner in Oneglobal's Financial Lines team

The companies involved

Oneglobal Broking Limited is a specialist international insurance and reinsurance broker headquartered in London. The firm operates in the heart of the Lloyd’s market, providing bespoke risk solutions across various complex sectors, including financial lines, marine, aviation, and energy. As an independent brokerage, Oneglobal focuses on high-stakes commercial risks where standard off-the-shelf policies often fail to address specific operational vulnerabilities.

The firm’s Financial Lines team, where Rupert Hills serves as a Partner, is tasked with navigating the increasingly blurred lines between professional indemnity, directors and officers (D&O) liability, and cyber risk. In the context of the European supermarket attacks, the role of such a broker is to identify where coverage overlaps or gaps exist, particularly as insurers move to harden their terms through standardized exclusions like LMA5400. Oneglobal’s analysis of these events suggests a shift in the threat landscape from data-centric extortion to physical-world sabotage, requiring a more integrated approach to property and cyber underwriting that accounts for the vulnerability of internet-connected industrial hardware.

What this means from an insurtech perspective

This wave of sabotage represents a significant challenge for the insurance value chain, specifically regarding the "silent cyber" risk inherent in the Internet of Things (IoT). For carriers and reinsurers, the use of LMA5400 exclusions in property policies creates a "no-man's land" where physical losses triggered by digital means may go uncompensated. This puts immense pressure on brokers to negotiate specific write-backs or affirmative cover for operational technology. The industry must move beyond viewing cyber risk solely as a data privacy issue; it is now a fundamental peril for physical assets. Underwriters who fail to clarify the triggers for "deterioration of stock" in the face of remote manipulation risk losing customer trust and facing complex litigation over what constitutes a "mechanical failure."