Cyberattacks Disrupt Supermarkets' Refrigeration Systems Across Europe

Supermarkets throughout Europe faced significant disruptions this week due to a series of cyberattacks targeting their refrigeration systems. These incidents resulted in temperature increase and food spoilage in stores located in countries such as Sweden, the Netherlands, Belgium, Ireland, Luxembourg, and Estonia.

Details of the Attacks

The security breaches on Monday follow a previous attack in France, where hackers gained control over cooling units in hundreds of supermarkets. Authorities reported that temperatures soared to alarming levels, reaching 122 degrees Fahrenheit, which not only led to food losses but also posed fire hazards.

At this time, cybersecurity experts and law enforcement have not provided any leads on who might be responsible for these incidents, nor have any groups claimed responsibility for the attacks.

Impact on Supermarket Chains

Ahold Delhaize, a major supermarket chain in the Netherlands, acknowledged an “IT incident” affecting multiple store refrigeration systems. They have communicated that their teams are actively working to evaluate the situation thoroughly.

CEO of Sabcobel, which manages Delhaize's systems, confirmed the nature of the incident as a cyberattack that turned the evaporators into defrost mode. In Belgium, five Spar stores operated by Colruyt Group reported similar attacks, and Carrefour noted that the attack briefly impacted 15 out of their 700 locations.

Responses from Affected Companies

ICA, a prominent grocery retailer in Sweden, stated that while their main systems were unaffected, a few stores reliant on an external supplier encountered problems. An incident at the ICA Kvantum store in Sjöbo saw fridge temperatures being raised to 122 degrees Fahrenheit, resulting in the disposal of spoiled products.

Additionally, Coop, a grocery retail group in Sweden, reported similar issues at six of its stores due to the attacks. In Ireland, the wholesaler Musgrave confirmed that their SuperValu stores experienced disruptions in refrigeration systems, urging quick action to remove spoiled items from sale. Their ongoing investigation aims to address the situation.

Broader Concerns

In Estonia, a technology provider indicated that cybercriminals accessed a computer controlling refrigeration, elevating temperatures dangerously high. The incidents underline a troubling trend where various operational technologies, including refrigerators and surveillance systems, can be remotely controlled, making them vulnerable to cyber threats.

John Billow, head of Sweden’s national cybersecurity center, emphasized the urgency of updating and securing exposed operational technology devices following these attacks. As the situation unfolds, he noted that multiple incidents involving grocery stores are being investigated.

“The necessity to update or patch our systems is clear,” Billow stated.