Cyberattack Disrupts Refrigeration at 700 European Supermarkets
By Dan Goodin, Ars Technica
An estimated 700 supermarkets in France were affected by a cyberattack that remotely disabled refrigeration systems, causing widespread food spoilage and, in some cases, electrical fires. According to an October 14 report by Ars Technica, attackers gained access to internet-connected controllers and activated defrosting systems, raising refrigerator temperatures as high as 122°F (50°C). Supermarkets in several other European countries were reportedly affected.
Security researchers say the attack exploited known vulnerabilities in outdated refrigeration controllers manufactured by Danfoss and Copeland/Dixell. Many of the affected systems reportedly lacked basic cybersecurity protections, despite earlier warnings from researchers and government agencies. The financial damage could reach tens or hundreds of millions of euros, although the full extent remains unclear. The attackers and their motives have not been identified.
The incident highlights a growing vulnerability in the food supply chain: supermarkets increasingly depend on interconnected digital systems to store and preserve perishable food. A cyberattack targeting a single type of equipment can disrupt hundreds of stores simultaneously, destroying food and threatening its availability to consumers.