Hackers Launch Cyberattack on Supermarket Refrigeration Systems in Europe

On November 2 of this year, the refrigeration systems of supermarkets across six European countries were targeted by a cyberattack. As a result, temperatures in the refrigeration units at some stores rose as high as 70 degrees, leading to the disposal of food products worth nearly 100,000 euros in Belgium alone.

The attack affected approximately 40 Delhaize supermarkets, at least 15 Carrefour locations, and five Spar supermarkets in Belgium, as well as the De Laet en Van Haver butcher chain. Similar incidents were also reported in Estonia, Sweden, Luxembourg, Ireland, and the Netherlands.

According to experts, refrigeration systems in large supermarkets are managed via central control units connected to the internet. This allows technical staff to monitor temperatures, identify malfunctions, and adjust settings without needing to visit the store in person.

However, this remote-access capability also introduces cybersecurity risks. Research by the company Forescout indicates that nearly 13,000 refrigeration systems across 99 countries are connected to the internet in an unprotected state. Experts point out that some devices run outdated software and do not receive security updates. Once attackers gain access to the system, they could alter temperatures, initiate defrosting processes, or disable warning signals.

Forescout specialists recommend disconnecting cooling systems from the public internet, restricting technical staff access to secure channels only, replacing obsolete equipment, and implementing unique login credentials for each employee.