Fast Facts
- Cyber attackers remotely manipulated refrigerator control systems in French supermarkets by exploiting outdated firmware vulnerabilities, causing food spoilage and fires worth tens of millions of euros.
- The attack targeted internet-connected refrigeration management software, specifically affecting Danish-made Danfoss controllers with known security flaws, enabling unauthorized remote control.
- Similar incidents in the US involve disruptions at military commissaries and supermarket chains, demonstrating a growing threat to critical supply chain infrastructure through internet-exposed cold chain systems.
The Threat, Techniques, and Targets
Hackers attacked connected refrigerators and freezers in French supermarkets. They increased the temperature to as high as 50 degrees Celsius. This caused fires and spoiled food. The attack affected major retailers like Carrefour, Monoprix, Les Mousquetaires, U. Cooperative, E.Leclerc, and Auchan. Moreover, other countries such as Spain, Portugal, Poland, Germany, and Belgium reported similar issues. The attack was large-scale and targeted essential supermarket equipment. The control panels for refrigeration units, which are connected over the internet, were compromised. The vulnerability was linked to outdated firmware on the affected devices. The Danish company Danfoss supplies the software used in these control systems. An incident was identified where the software had security flaws that allowed attackers to bypass authentication and execute code on the devices. This method resembles recent disruptions at U.S. military commissaries.
Impact, Security Implications, and Guidance
The attack caused significant food spoilage and property damage, with losses expected to reach tens of millions of euros in France alone. The incident has highlighted the importance of securing critical equipment connected to the internet. The vulnerability in the supermarket control systems shows a need for better firmware management and timely updates. As of now, some stores have started to return to normal operations. If similar attacks occur, affected companies should consult with their software providers or authorities for detailed remediation steps. Because the specific solutions depend on the system involved, guidance should be obtained from the vendors or relevant cybersecurity agencies.
Stay Ahead with the Latest Tech Trends
Learn how the Internet of Things (IoT) is transforming everyday life.
Stay inspired by the vast knowledge available on Wikipedia.
ThreatIntel-V1
