Suspected Cyber Tampering Hits Supermarket Cooling Units Across Five European Nations

En bref

• Cooling systems at multiple supermarket sites were affected.
• Fridges and freezers reportedly warmed, leading to food losses.
• The activity spans five European countries and began on a Monday in November.
• Investigators suspect hacking; no CVE identifiers have been tied to the incident.

Supermarkets in five nations across Europe are investigating apparent remote interference with refrigeration equipment. Initial reports indicate that fridges and freezers at several stores were manipulated on a Monday in November, causing temperatures to rise and resulting in spoiled food.

The affected estate includes multiple supermarket locations rather than a single site. The common thread is connected cooling infrastructure: commercial refrigeration, fridges, and freezers. The exact number of stores and the volume of discarded stock were not disclosed in the facts available.

Suspected hacking is the leading line of inquiry. The described pattern—temperature manipulation across sites—suggests unauthorized access to controls or monitoring systems. No CVE identifiers have been assigned, which is consistent with an operational incident rather than a publicly catalogued software vulnerability.

Cold-chain integrity is safety-critical. When freezer or fridge temperatures climb, retailers must discard stock, and repeated manipulation could undermine confidence in connected building controls. For schools and public agencies that depend on vendors, the same remote-management exposure may exist in cafeteria refrigeration and contracted food service.

What to watch: whether the same remote-access path appears in other retailers, how quickly stores reconcile temperature logs, and whether authorities attribute the activity. Organizations should treat refrigeration telemetry as security-relevant and verify vendor access.

À faire maintenant

1. Review remote-access logs and account activity for refrigeration controllers and monitoring platforms; disable unused accounts and require MFA where supported.
2. Segment cooling and building-management networks from corporate IT; restrict inbound and outbound traffic to known vendor endpoints.
3. Preserve logs and temperature records; contact the refrigeration vendor and law enforcement or cyber authorities if tampering is suspected.
4. Rotate credentials and API keys for refrigeration management systems; check for default passwords and shared accounts.
5. Enable alerting for unexpected setpoint changes, temperature excursions, and after-hours control commands.
6. Validate backups and manual override procedures for freezers and fridges; test fail-safe alarms.
7. Inventory all internet-exposed refrigeration and building-management devices, remove direct public access, and apply vendor firmware updates.

Source originale

Security Affairs