Global Refrigerator Hacking Spree Spoils Food and Tests Critical Infrastructure

Widespread cyberattacks targeting internet-connected commercial refrigerators have raised internal temperatures across supermarket chains in at least 11 European countries, spoiling large volumes of food. The incidents have also affected facilities handling sensitive medical supplies, including three sites in France where cold rooms storing blood and plasma bags experienced severe temperature spikes.

The medical blood samples were saved because automated alarm systems and staff quickly detected the temperature shifts and implemented fail-safe measures. However, the broader wave of digital intrusions has forced businesses across the continent to discard massive amounts of spoiled merchandise. Similar attacks occurred in October, affecting hundreds of French retail stores.

The disruption extends beyond European retail and medical facilities. In August, approximately six grocery stores and commissaries on United States military bases suffered identical temperature-manipulation incidents that spoiled food inventory. The Pentagon is currently investigating these base incidents while collaborating with French law enforcement agencies.

Security researchers note that these incidents follow a pattern seen in previous years. In 2022, similar attacks targeted 16 supermarkets in Russia at the start of the war with Ukraine, alongside 40 stores in Israel, according to a report by equipment manufacturer Danfoss. Josh Corman, executive in residence for public safety and resilience at the nonprofit Institute for Security and Technology, observed that society's reliance on connected technology has outpaced efforts to protect it.

Investigators are still working to determine whether the scattered incidents are part of a coordinated campaign or the work of separate actors. The attacks appear to exploit unpatched refrigeration controllers that were directly exposed to the internet, using outdated firmware and weak passwords. Danfoss stated that affected systems were running outdated software and urged customers to keep their devices updated. The US Cybersecurity and Infrastructure Security Agency issued an alert noting that attackers could exploit cold storage systems through authentication bypasses, arbitrary code injections, and weak configurations.

Attribution remains uncertain as various groups have drawn suspicion. While Russian hacktivists attempted to claim responsibility for certain attacks without providing credible evidence, researchers have found potential indicators pointing toward Russia-based involvement in at least some cases. The Kremlin has denied involvement. Separately, unnamed US officials indicated that Iran-linked attackers may be responsible for the freezer hacks on US military bases, though investigations remain active.

Summary

As organizations increasingly connect physical equipment to the internet without adequate security controls, critical supply chains remain vulnerable to remote attacks capable of destroying food supplies and threatening medical storage.