Suspected cyberattacks disrupted supermarket fridges and freezers overnight into Monday, 2 November. Problems were reported in Belgium, Sweden, Ireland, Luxembourg, the Netherlands and Estonia. Some Swedish freezers reached 50°C, and affected shops had to throw away food.
Carrefour reported problems at 15 Belgian shops, while 13 SuperValu shops in Ireland were affected. Belgian refrigeration company Sabcobel said attackers had switched cooling equipment into defrost mode, a setting used to melt ice. Investigators have not identified those responsible, and no group has claimed responsibility.
Supermarket cooling systems often connect to the internet so that specialists can check faults and adjust settings without visiting. However, anyone who gains unauthorised access may also be able to change temperatures or turn off alarms. Cybersecurity researchers at Forescout recommend removing these controls from the open internet and allowing workers to connect only through secure tools.
In a separate wave of attacks in October, hundreds of French supermarkets experienced similar interference with their cooling systems. Some equipment affected in France and during Monday’s incidents used technology from Danfoss. However, investigators have not established whether the attacks involved the same security weaknesses or the same people.
