Cyberattack hits French refrigeration systems

A cyberattack on Monday, October 12, affected refrigeration systems in nearly 400 stores across France, causing temperatures to rise to dangerous levels and forcing the disposal of thousands of food items. The attack exploited vulnerabilities in outdated software and internet-connected management systems.

Experts highlight risks of connected refrigerators

Benoît Grünemwald, director of public affairs at Eset, emphasized that the incident shows the risks of connecting refrigerators to networks, despite the convenience of remote monitoring. He asked, "What is not connected?" and stressed the need for better cybersecurity practices.

Operational equipment faces long-term security challenges

Oded Vanunu, head of research at Check Point Software Technologies, noted that the attack was not unexpected, as supermarket refrigerators have become information systems connected to networks. He pointed out that operational equipment, designed to last over ten years, struggles to keep up with evolving cyber threats.

Security flaw was known and patched

Claroty researchers reported that the vulnerability used in the attack was disclosed and fixed in August. Grünemwald suggested that following basic cybersecurity guidelines, such as the ANSSI hygiene guide from 2017, could have prevented the incident. He also urged the adoption of the European NIS2 directive in French law to clarify responsibilities.

Attack shows need for stronger retail cybersecurity

The incident has raised concerns about the retail sector’s approach to cybersecurity. Grünemwald warned that even without data theft, cyberattacks can disrupt operations and influence human behavior, such as destroying food supplies. He called for restricting remote access and monitoring system behavior to prevent future attacks.