Cybersecurity · VIDEO
Attacks on refrigeration systems: European supermarkets hit, physical and financial damages
New cyber attacks have targeted the refrigeration systems of supermarkets in Belgium, Ireland, Sweden, Finland, and Estonia, causing physical and financial damage. Analysts highlight the lack of visibility on assets and the need to review IoT security strategies.
KEY TAKEAWAYS
- Attacks on refrigeration systems cause physical damage and financial losses in European supermarkets
- Lack of visibility on assets and complexity in managing IoT devices
- Need to review security strategies to protect critical infrastructures
- Legal and contractual issues hinder rapid responses to incidents
Transcript
A new wave of cyberattacks has hit European supermarkets, targeting refrigeration systems. Following an attack in France last month, similar incidents occurred last Monday in Belgium, Ireland, Sweden, Finland, and Estonia. Retail giants like Carrefour, Spar, and Ahold Delhaize were among the affected. The attacks caused sudden temperature changes in refrigerators and cold storage rooms. No group has claimed responsibility.
The complexity of these systems and lack of asset visibility have hindered response efforts. Katell Thielemann of Gartner noted that maintenance and management are often outsourced, creating confusion over responsibility. Bobby Kuzma of IDC highlighted a visibility gap between threat intelligence teams and those managing industrial operational technology systems.
David Neuman of Acceligence observed that refrigeration systems are often managed by external contractors, leading to security inventory oversights. Frank Dickson of Dickson Research warned that legal and contractual implications can delay response times, leaving systems vulnerable.
Brian Levine of Control Risks emphasized the importance of physical security planning and budgeting. Noah Kenney of Digital 520 stressed the need for independent security controls to prevent harmful commands. Carmi Levy, an independent technology analyst, noted the lack of firmware updates and inadequate security management for IoT devices like refrigerators.
These attacks raise compliance issues under the NIS2 directive and DORA regulation, highlighting the need for adequate cyber risk insurance. The incidents underscore the importance of a managed Security Operations Center (SOC) for real-time monitoring and response. Companies must adopt a proactive approach to risk management and business continuity planning.
A zero trust approach to IoT device security is crucial to prevent unauthorized access and limit the impact of attacks. Protecting sensitive data and ensuring digital operational resilience are key priorities in the face of these evolving threats.
