Why Europe's supermarket fridges were easy targets

Europe’s Supermarket Fridge Cyberattacks Expose Food Security Risks

By Marta Fiorin and Zoran Mikletic

Supermarket Fridge Cyberattacks and Their Impact on Food Security

BRUGES, Belgium, Nov 4 (Reuters) - Hackers who cranked up fridge temperatures at supermarkets across Europe may have gained access through public internet-connected systems protected by default passwords or outdated software, a cybersecurity expert said.

Recent Incidents and Affected Entities

The second cyberattack in three weeks hit fridge systems at supermarket chains including Carrefour and Delhaize in Belgium, and ICA and Coop in Sweden, forcing retailers to discard spoiled food and raising concerns about food security. Three blood banks in France were also hit.

Authorities have not publicly disclosed how the attackers gained access, and no perpetrator has been identified.

Expert Insights on System Vulnerabilities

Laurens Singier, an ethical hacker and researcher at Cyber 3 Lab, part of Howest University of Applied Sciences in Bruges, Belgium, said internet-connected systems which can be accessible remotely often have weak protections.

"In this case, the weak point was mainly putting those devices on the public internet. They shouldn't even be there," he said, speaking from a lab full of servers and systems similar to those that could control supermarket store fridges.

Common Security Flaws in Industrial Systems

A common problem with such systems is that operators fail to change default passwords set by the manufacturer, while others run older software with known vulnerabilities, he said.

AI was now making it easier for amateurs to pull off hacks, Singier added.

Supermarket Responses and Industry Recommendations

Supermarkets on Tuesday said they had taken hacked fridges offline, in line with guidance from refrigeration monitoring software provider Danfoss, whose systems were ​again among those targeted. Danfoss has said it is working with clients on fixes.

Steps to Enhance Security

Singier said that retailers should check they understand how they connect to the store interface, strengthen passwords, and consider switching from internet-based systems to more secure systems using SIM cards, like those used by solar panels and car chargers.

"After this attack, we've seen a lot less of these devices publicly on the internet," he said. "But if you look at the numbers, there's still a lot of industrial devices which are open to the public, and in a lot of cases you yourself as the butcher or the chocolatier don't even know about it."

(Reporting by Marta Fiorin and Zoran Mikletic; Writing by Helen Reid; Editing by Adam Jourdan and Elaine Hardcastle)