Hackers target supermarket refrigeration systems across Europe

Hackers have targeted supermarket refrigeration systems across at least 10 European countries, causing temperature spikes in fridges and freezers. According to reports, disruptions have been noted in Belgium, Estonia, Finland, Ireland, Italy, Luxembourg, the Netherlands, Portugal, Germany, and Sweden.

Impact on Food Supply Chains

In Ireland, the Musgrave Group stated that 13 SuperValu stores were affected, resulting in chilled and frozen products being removed from sale. In Portugal, the Mosqueteiros group linked incidents at seven Intermarché stores to an attack involving an outside refrigeration service provider. In Sweden, retailers ICA and Coop reported refrigeration problems; Reuters reported that one Swedish store said attackers had set its refrigerators and freezers to 50°C.

In Estonia, a refrigeration contractor reported that hackers accessed a customer’s control system and raised temperatures to 50°C. In the Netherlands, a supplier reported at least 17 affected businesses, including smaller food retailers and butcher shops.

Cybersecurity Warnings

Dr. Richard Horne, head of the National Cyber Security Centre (NCSC), said there is evidence of "a couple of impacts" within the food supply chain in the UK and that vulnerable technology has been "exploited." Dr. Horne noted that "That technology base that we rely on as a society has not been invested in to the extent it needs to be," adding that many organizations have extended systems beyond their end of life or failed to keep vital computer systems upgraded.

Dr. Horne also stated that "vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable," noting that AI enables adversaries to find and exploit these vulnerabilities with ease.

Paul Chichester, director of operations at the NCSC, stated the agency is aware of cyber attacks affecting the UK meat processing industry, though the national impact remains minimal. The NCSC is currently working with affected businesses and identifying existing vulnerabilities.

Technical Details and Risks

These attacks target operational technology, which includes the equipment and software used to control physical processes like cooling systems. Danfoss equipment has been linked to several incidents. An ICA spokesperson told AFP that affected stores used an external refrigeration control system supplied by the Danish manufacturer, and Danfoss confirmed its products were involved in the latest attacks.

European Union officials warned that the incidents could represent a deliberate effort to disrupt food supplies. While no group has claimed responsibility, the NCSC warned that the country could face cyberattacks involving AI-powered malware on key infrastructure, such as airports, hospitals, and power stations, within two years.

---

Sources

• independent.co.uk: Hackers already targeting UK supermarket freezers, cybersecurity chief warns | The Independent
• cybersecuritynews.com: Hackers Target Supermarket Refrigeration Systems Across Europe, Raising Freezer Temperatures to 50°C

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.