A recent cyberattack on French supermarkets resulted in the spoilage of numerous fridges full of food, highlighting the vulnerabilities of internet-connected systems and devices, according to cybersecurity experts. Montreal-based cybersecurity specialist Steven Lachance emphasized the critical importance of ensuring the security and privacy of connected technologies as reliance on them grows.
The attack targeted centralized control systems enabling remote temperature adjustments for fridges. Hackers gained access to these controls, raising fridge temperatures significantly, causing food spoilage and potential fire hazards in hundreds of stores. The Paris prosecutor’s office is investigating the incident to assess the damage and identify the perpetrators. No group has claimed responsibility or issued any ransom demands yet.
Affected fridges in stores are typically linked to the internet through centralized panels for remote monitoring and adjustments of metrics like temperature. The refrigeration control panels targeted were primarily manufactured by Danfoss, with additional systems from Copeland and Dixell also being compromised. The vulnerability stemmed from outdated firmware or systems that no longer received security updates, as highlighted by Danfoss and cybersecurity firm Claroty.
Such attacks on the food system are not unprecedented, with previous incidents affecting major global suppliers like JBS and United Natural Foods, Inc. The interconnected nature of modern food processing and distribution systems makes them attractive targets for cyberattacks, necessitating swift implementation of security updates and digital literacy among businesses to mitigate risks.
Experts warn that any internet-connected device, whether commercial or residential, poses a potential hacking risk. Smart appliances like fridges, thermostats, and lightbulbs are susceptible to exploitation due to security vulnerabilities associated with centralized control mechanisms. The importance of continuous investment in cybersecurity measures to address evolving threats is crucial in safeguarding digital ecosystems.
Devices capable of recording audio and video present additional privacy risks, with potential for malicious activities such as unauthorized access to sensitive data or network infiltration. Mitigating these risks involves prudent device selection, disconnection from the internet where unnecessary, and local storage of sensitive data to prevent unauthorized access.
The recent incident in France underscores the imperative for vigilance and proactive measures to secure internet-connected devices and systems in an increasingly digitalized world.