A recent cyberattack on French supermarkets resulted in the spoilage of food stored in hundreds of fridges, highlighting the security risks associated with internet-connected systems and devices, according to cybersecurity experts. The attack targeted centralized control systems that regulate fridge temperatures remotely, allowing hackers to raise temperatures significantly, causing food spoilage and potential fire hazards.
Authorities in Paris are investigating the cybercrime to assess the extent of the damage and identify the perpetrators. While no group has claimed responsibility or issued any ransom demands, the attack has raised concerns about the security and privacy of connected technologies.
The affected fridges were connected to the internet through control panels that allowed remote monitoring and adjustments of temperature settings. The cybersecurity agency in France revealed that the compromised monitoring systems were produced by companies like Danfoss, Copeland, and Dixell. Danfoss, in response, mentioned that the affected units had outdated firmware, making them susceptible to exploitation.
Experts warned that failing to update firmware and leaving interfaces open to the internet could have facilitated the attack. They emphasized the importance of promptly implementing security updates to prevent such incidents. The incident underscores the vulnerability of internet-connected devices, including commercial systems and household appliances.
While the attack did not pose a risk to food supplies in France, it underscores the potential threats to the food distribution system. Past cyberattacks on food supply chains, such as those targeting JBS and United Natural Foods, Inc., highlight the increasing risks faced by the industry.
As the food system becomes more digitized, the potential for cyber threats grows. Experts recommend enhancing cybersecurity measures and rapidly responding to incidents to safeguard against future attacks. The incident serves as a wake-up call for businesses and consumers to prioritize cybersecurity to protect against potential vulnerabilities in internet-connected devices.