In a recent wave of cyberattacks, supermarkets across Belgium, Sweden, Estonia, and other European countries faced significant disruptions as attackers tampered with internet-connected refrigeration controls. This manipulation forced some stores to discard large quantities of chilled and frozen products. The Danish company Danfoss, known for manufacturing refrigeration controls, reported that its systems were involved in these incidents, echoing similar attacks that occurred in France three weeks earlier.
The attackers gained access to refrigeration control systems, altering settings so that cooling units switched to defrost mode or raised temperatures to levels as high as 50°C. This tactic caused significant spoilage, with one Belgian butcher estimating losses of €15,000 in ruined meat. Although many supermarkets had taken security measures following the French incidents, some had not, making them vulnerable to attack.
The compromised refrigeration systems were primarily older models that had not received necessary updates. Some systems still used default passwords and were not adequately secured. Despite these vulnerabilities, there is no confirmed link between these attacks and the earlier French incidents, and no group has claimed responsibility.
Cybersecurity agencies in affected countries, including Belgium's Centre for Cybersecurity and Sweden's National Cybersecurity Centre, are currently investigating the attacks. They are urging organizations to secure their refrigeration systems by disconnecting them from the internet unless necessary and ensuring they are updated and protected with multiple layers of security. CERT-FR, the French national cybersecurity agency, has also issued alerts warning that similar attack campaigns might still be underway.
Prosecutors in Belgium have launched a criminal investigation to identify those responsible, but it remains uncertain whether the perpetrators will be caught. Meanwhile, companies like Danfoss and other refrigeration contractors continue to work with customers to strengthen their systems against further threats.
