Supermarket freezers across Europe hit by second suspected cyber-attack
European supermarkets are facing a second wave of suspected cyberattacks targeting their refrigeration systems, leading to extensive food spoilage and significant financial losses. This alarming incident underscores the profound vulnerability of internet-connected industrial control systems to malicious actors. It has garnered attention on HN as a stark example of how digital exploits can wreak costly, tangible havoc on critical real-world infrastructure.
The Lowdown
A wave of suspected cyberattacks has targeted supermarket refrigeration systems across Europe for the second time in recent weeks, causing widespread food spoilage and drawing attention to the precarious security of internet-connected infrastructure. This follows a similar, large-scale attack in France just weeks prior.
- Multiple supermarket chains across Sweden (Coop, ICA), Belgium, and Luxembourg (Ahold Delhaize, Spar, Shop & Go, Proxy Delhaize) reported that their refrigerators and freezers experienced significant temperature increases overnight.
- This incident mirrors an October attack in France where hackers gained remote control of cooling units in up to 700 supermarkets, overriding settings from -27C to over 50C and disabling alarm systems.
- The French attack resulted in massive losses of fresh and frozen products, with some stores discarding hundreds of thousands of euros worth of goods.
- The vulnerability stems from most supermarket cold aisles being internet-connected for remote maintenance, with hackers exploiting controllers primarily from companies like Danfoss, which had previously identified security flaws and recommended updates.
- French authorities, including the Paris prosecutor’s office and ANSSI, are investigating the previous attack, which caused "food losses and fires," and confirmed that controllers from other manufacturers were also targeted.
These repeated incidents highlight a critical and escalating threat to the food supply chain, demonstrating how digital vulnerabilities can lead to widespread physical and economic disruption across national borders.
The Gossip
Recurring Rampage & Geographic Reach
Commenters immediately recognized the 'second' aspect of the attack, questioning whether this was a new, widespread incident or merely a rehash of the earlier French events. The discussion clarified that this was indeed a distinct and broader European event, significantly expanding the geographical impact beyond the initial French incidents and highlighting an escalating threat.