
Supermarket freezers across Europe hit by second suspected cyber-attack
Chains in Sweden, Belgium and Luxembourg say fridge temperatures rose overnight, similar to hack of French stores
Supermarket chains in Sweden, Belgium and Luxembourg have said the temperatures of their refrigerators and freezers in dozens of stores rose overnight, prompting fears of a cyber-attack similar to one that caused millions of euros of food losses in France.
SwedenâÂÂs Coop chain told the daily Aftonbladet on Monday that six of âÂÂits stores âÂÂhad been âÂÂaffected, while ICA said it was âÂÂaware that a limited âÂÂnumber of stores were affected by an incident overnight which impacted their refrigeration and freezer systemsâÂÂ.
The Dutch retailer Ahold Delhaize, which last âÂÂmonth âÂÂreported a âÂÂcybersecurity âÂÂincident âÂÂto police in the Netherlands, said an âÂÂIT incidentâ âÂÂhad hit fridges and â freezers in dozens of its â supermarkets in âÂÂBelgium âÂÂand âÂÂLuxembourg.
A company spokesperson, Sarah âÂÂDe Meester, said the supermarket chain had established that temperatures in the cooling systems had increased, adding that the incident was being investigated.
BelgiumâÂÂs Le Soir newspaper reported that dozens of stores and supermarkets were affected, including five Spar outlets, multiple Shop & Go convenience stores attached to Q8 service stations, and a number of smaller Proxy Delhaize minimarkets.
âÂÂWe started mobilising technicians at 1am,â Stephan Moelans, the chief executive of Sabcobel, which specialises in refrigeration system installations, told the paper. âÂÂWe spent all night and morning disconnecting the affected installations from the grid.âÂÂ
French â police said in October that hackers had seized control of cooling units at â up to 700 supermarkets in a large-scale attack that led to heavy losses of chilled and frozen foods and underlined the vulnerability of internet-connected systems.
Hackers had remotely overridden the settings on thousands of freezers, fridges and chiller cabinets, pushing them from as low as -27C to well over 50C. The Intermarché, Coopérative U, Carrefour, Leclerc and Monoprix chains were among those affected.
Stores had to discard vast quantities of fresh meat, dairy and frozen products, with many suffering losses ranging from tens of thousands of euros to more than â¬130,000 (ã109,000). Two stores in Alsace reported a combined loss of â¬270,000.
Most supermarket cold aisles are connected to the internet to allow remote maintenance and alerts for system failures. In the French attack, the hackers pirated controllers mostly supplied by the Danish company Danfoss.
They disabled alarm systems before adjusting the thermostats or extending the defrost programme by hours. Danfoss said it had identified security flaws last year and had âÂÂlong recommendedâ customers install updates.
The Paris prosecutorâÂÂs office has opened a formal investigatiion into the French attack, saying damage included âÂÂfood losses and firesâÂÂ, and the prime minister, Sébastien Lecornu, instructed FranceâÂÂs national cybersecurity agency, ANSSI, to investigate.
ANSSI subsequently confirmed that supermarkets using controllers from two other companies were also targeted in the attack.
