CERT-FR
Latest
European supermarkets hit by fridge and freezer cyberattacks after earlier French incident
Retailers in Belgium, Ireland, Sweden, Finland and Estonia suffered attacks on refrigeration control systems that caused sudden temperature changes, nearly identical to a mid-October attack on French supermarkets. Carrefour, Spar and Ahold Delhaize were named as affected, and no group has claimed responsibility. CERT-FR advised disconnecting refrigeration controllers with public IP addresses and reconnecting only via a secure VPN after verifying configuration.
Hackers remotely defrost food in supermarket fridges across Belgium, Ireland, Luxembourg and Sweden
Supermarket chains in Belgium, Ireland, Luxembourg and Sweden report cyberattacks that remotely set refrigeration units to defrost mode, with temperatures reaching up to 50oC and forcing large food write-offs. Around 40 Delhaize stores in Belgium were hit, along with Carrefour, Intermarché, Spar, ICA, Coop and SuperValue sites. The attacks follow a mid-October wave in France, where some stores were running outdated firmware on Danfoss refrigeration controllers, but it is unclear whether the same method was used.
Hackers reportedly raise supermarket freezer temperatures in Sweden to 55°C
Several ICA and Coop stores in Sweden reported overnight attacks on refrigeration systems into 2 November, with freezers reaching up to 55°C and stock spoiled. ICA says the affected shops had connections outside its central network, but the controller brands, entry point and attackers have not been identified. The incidents follow similar French attacks, although no link has been confirmed.