A shopper survey empty fridges at a branch of SuperValu in Dublin. Photograph: Natalia Campos/ReutersView image in fullscreenA shopper survey empty fridges at a branch of SuperValu in Dublin. Photograph: Natalia Campos/ReutersExplainerWho is hacking Europe’s supermarket fridges and freezers, and why? After a second apparent cyber-attack in as many weeks, we examine possible culprits and their motives Shop fridges and freezers across Europe hit by fresh suspected cyber-attack Supermarket fridges and freezers in seven European countries have malfunctioned, their thermostats remotely cranked up in some cases to 50C (122F).The EU has condemned what it said was “a deliberate attempt to disrupt our food supply chain and undermine consumers’ confidence in it”.Which supermarkets were affected and what does it mean? The attack hit fridges in Belgian branches of Carrefour, Intermarché and Ikea, Coop and ICA in Sweden, Delhaize in Luxembourg, Kesko in Finland, SupaValu in Ireland and shops in Estonia.It appeared to be a reprise of attacks three weeks ago when French retailers had to ditch huge amounts of food when their fridges suddenly overheated as a result of anonymous hackers…
Who is hacking Europe’s supermarket fridges and freezers, and why?
In short
Unidentified hackers took remote control of internet-exposed appliance management systems without utilizing malware, allowing them to adjust grocery thermostats up to 50C (122F) while leaving minimal forensic evidence. The campaign struck major chains including Carrefour, Ikea, Kesko, and SuperValu across countries such as Belgium, Sweden, Luxembourg, and Finland. This coordinated disruption mirrors a previous wave of incidents in France as well as ongoing Pentagon inquiries into August cooling malfunctions across at least six U.S. military bases. Security experts emphasize that these commercial chillers remain uniquely vulnerable because operators frequently neglect cyber risks and avoid t…
Key points
- Intruders avoided malware by hijacking internet-exposed appliance management software dir…: Intruders avoided malware by hijacking internet-exposed appliance management software directly, substantially reducing detectable digital traces.
- Commercial cooling systems routinely lack vital security updates because taking them offl…: Commercial cooling systems routinely lack vital security updates because taking them offline disrupts essential food preservation operations.
- Security analysts suspect the unattributed intrusions may be state-backed signaling desig…: Security analysts suspect the unattributed intrusions may be state-backed signaling designed to demonstrate offensive capabilities and trigger psychological disruption.