In a recent incident, French supermarkets faced a cyberattack that led to the spoilage of food stored in hundreds of refrigerators. This event highlights the risks associated with internet-connected systems and devices, according to cybersecurity experts.
Steven Lachance, a cybersecurity expert based in Montreal, emphasized the importance of prioritizing security and privacy as reliance on connected technology grows. The attack targeted centralized control systems enabling remote temperature adjustments for fridges in numerous grocery stores. The hackers managed to manipulate the controls, raising fridge temperatures significantly, causing food spoilage and potential fire hazards.
The Paris prosecutor’s office initiated an investigation into the cybercrime to assess the extent of the damage and identify the perpetrators. As of now, no group has claimed responsibility or made any ransom demands.
The compromised remote monitoring systems were linked to refrigerators made by companies such as Danfoss, Copeland, and Dixell. Danfoss acknowledged that some affected units were running outdated firmware, making them vulnerable to exploitation. Cybersecurity firm Claroty previously identified vulnerabilities in Danfoss’s firmware, allowing unauthorized access for remote changes. Danfoss promptly released a patch to address the issue.
Experts suggest that failure to implement security updates and leaving interfaces exposed to the internet likely facilitated the attack on the refrigerator controllers in France. Outdated firmware particularly made the hacking process smoother, as hackers exploit known vulnerabilities once updates are announced.
French Finance Minister Roland Lescure confirmed that around 700 supermarkets in France were impacted by the cyberattack, emphasizing the critical role of food security. While this incident is significant, it is not the first cyberattack on the food distribution system. Previous attacks on major suppliers like JBS and United Natural Foods, Inc., underscore the vulnerability of the food industry to cyber threats.
As more devices, including smart appliances, become interconnected, the risks of cyberattacks increase. Devices connected to the internet, from commercial systems to residential appliances, are potential targets for hackers. Ensuring prompt implementation of security updates and enhancing digital literacy among businesses are crucial steps in mitigating cyber threats.
The incident in France serves as a stark reminder of the security risks posed by internet-connected devices. Privacy concerns are particularly pronounced for devices capable of recording audio and video. To enhance security, experts recommend avoiding unnecessary connectivity for smart devices and prioritizing local storage for sensitive data.
In conclusion, the cyberattack on French supermarkets underscores the pressing need to address cybersecurity vulnerabilities in internet-connected systems and devices to safeguard critical infrastructure and consumer data.
