Several European countries have witnessed a wave of cyberattacks targeting cooling systems in major retail chains, leading to widespread operational disruptions and losses in food products. The attacks affected more than 115 stores in Belgium, the Netherlands, Sweden, Luxembourg, Ireland, and Estonia.
Nature of the Attack and Its Impact
Attackers exploited security vulnerabilities in the control units of cooling systems to access them remotely, where they altered temperature settings or forcibly activated the "defrosting" mode. In some cases, temperatures were raised to 50 degrees Celsius, making it impossible to maintain the safety of frozen foods and forcing store managers to dispose of large quantities of inventory.
Companies such as ICA, Coop, Ahold Delhaize, and Carrefour confirmed the incidents, noting that the impact ranged from a complete shutdown of cooling systems to unauthorized activation of heating functions. Sabcobel, a technical supplier for a number of the affected sites, explained that the attack exploited vulnerabilities similar to those observed in similar attacks that occurred last month in France.
Why This News Matters
This incident highlights the growing security risks associated with the Internet of Things (IoT) in the critical infrastructure of the commercial sector. Relying on network-connected cooling systems without sufficient security makes stores vulnerable to attacks that could lead to direct financial losses and disruption of food supply chains.
What Is Changing Practically?
Technical experts pointed out that simply updating software is not enough to protect these systems, as effective protection requires modifications to physical infrastructure and device management via secure and encrypted internet connections. These incidents are pushing companies to re-evaluate remote access protocols for Industrial Control Systems (ICS) to ensure they are not exposed to hacking via public networks.