Refrigerators and freezers at supermarkets across several European countries have been targeted in a series of suspected cyberattacks, resulting in food spoilage and significant losses for retailers.
On Monday, Nov 2, at around 2 a.m., supermarket refrigeration systems across Europe were reportedly compromised, with attackers remotely manipulating temperature controls and causing some units to heat up to 50°C.
The incidents affected supermarkets in Belgium, Sweden, the Netherlands, Luxembourg, Ireland, Estonia and Finland. Several retailers reported that their refrigeration systems had been tampered with overnight, with some stores discovering the problem only hours later. By then, large quantities of perishable food had spoiled or become unsafe for sale, forcing supermarkets to discard the affected products.
In Sweden, supermarket chain ICA reported that some of its refrigeration units had reached temperatures of 50°C.
In Belgium, several supermarket chains, including Delhaize, Carrefour, Colruyt and Intermarché, reported problems with their refrigeration systems. Delhaize said several dozen stores were affected, while Carrefour reported problems in 15 of its approximately 700 Belgian outlets.
The attacks were not limited to supermarkets. Other food retailers and businesses operating refrigeration systems also reported disruptions.
A Previous Attack in France
The latest incidents come just weeks after a similar cyberattack in France on Oct 12, when hackers reportedly gained control of refrigeration systems at hundreds of supermarkets and independent stores.
According to French authorities, the attackers manipulated remotely accessible refrigeration controllers, causing temperatures to rise dramatically. Some units reportedly reached temperatures exceeding 50°C, resulting in food losses and fires.
The Paris prosecutor's office opened an investigation into the incident, with approximately 700 victims reportedly identified.
No individual or group has claimed responsibility for either incident. Authorities have also not established whether the October attack in France and the latest attacks across Europe were carried out by the same perpetrators.
The incidents have raised concerns among European authorities about the vulnerability of essential infrastructure to cyberattacks, particularly amid growing tensions following Russia's invasion of Ukraine. Moscow has repeatedly denied involvement in sabotage and hybrid warfare operations, and there is currently no publicly established evidence linking Russia to these supermarket attacks.
Katrien Eggers, spokesperson for Belgium's Centre for Cybersecurity (CCB), said that authorities were aware of the incident but could not identify those responsible.
Speaking to Reuters, she stated, “It is not known who is behind this attack, and it may never be determined.”
Eggers also expressed concern over the growing number of cyber incidents and the role artificial intelligence could play in making cyberattacks more sophisticated.
She warned that AI could make it easier for sophisticated attackers to exploit vulnerabilities in existing IT systems.
Cybersecurity in an AI World?
In a world where everything, from smartwatches to smart bottles, is becoming connected to the internet, and where many products are increasingly moving towards paid subscriptions for additional features, the latest incidents raise serious questions about cybersecurity.
Refrigeration systems, security cameras, alarm networks, medical equipment, and other equipment that were once largely mechanical are now increasingly connected to computer networks and can be monitored or controlled remotely.
While these technologies offer convenience and efficiency, they also create new vulnerabilities. In this case, a cyberattack targeting refrigeration controls was enough to potentially destroy thousands of euros worth of food and disrupt businesses across multiple countries.
It is concerning whether governments and companies, which are so eager to collect our data, sell us products and introduce subscriptions for additional features, can provide adequate protection against such threats.
As the AI boom progresses, the possibility of crippling essential infrastructure through cyberattacks no longer seems like a science-fiction concept, but rather an increasingly serious threat that governments and businesses must prepare for.
Comments