France Faces Ongoing Cyberattack Threat to Supermarkets' Refrigeration Systems
France's cybersecurity authority has issued a warning regarding a cyberattack that has targeted refrigeration systems at supermarkets, indicating that the threat may still be active. The incident, which occurred on Monday, affected around 700 supermarkets, resulting in significant spoilage of fresh and frozen goods as temperatures in refrigeration units soared to 50 degrees Celsius for several hours.
Retailers have been advised to reconnect their refrigeration systems to the internet only through secure virtual private networks (VPNs) or protected networks. Additionally, they are encouraged to install necessary firmware updates and change their passwords to enhance security. The Intermarché supermarket chain reported losses amounting to tens of millions of euros in just one day due to the attack.
French finance minister Roland Lescure described the situation as a wake-up call for the industry, emphasizing the need for improved security measures in connected refrigeration equipment. The cybersecurity agency has noted that many of the affected systems were older models manufactured by Danfoss and Copeland, which no longer receive software or security updates. Vulnerabilities in these systems had previously been identified by cybersecurity experts, raising concerns about the security of connected devices in the food supply chain.
Risks of Outdated Cybersecurity Practices
The attack has highlighted the potential risks associated with inadequate cybersecurity practices in the food sector. Experts have pointed out that the incident appears to have exploited weaknesses in older systems, underscoring the importance of maintaining basic cyber hygiene. A scan revealed that thousands of Danfoss interfaces were still accessible online, raising alarms about their security.
Clearance Granted
In a related incident, the Dutch supermarket chain Albert Heijn faced disruptions due to a separate cybersecurity event, prompting investigations into the incidents. Authorities in both France and the Netherlands are currently investigating the attacks, with Europol confirming its involvement in the ongoing inquiries. As of now, no perpetrators have been identified, and no group has claimed responsibility for the French attack.
The French government has reassured the public that the attack does not pose a threat to the overall food supply, although it has raised concerns about food security. The incident serves as a stark reminder of the vulnerabilities in the food supply chain and the critical need for enhanced cybersecurity measures in the face of evolving threats.
