A recent cyberattack on French supermarkets resulted in the spoilage of hundreds of fridges’ worth of food, highlighting the risks associated with interconnected digital systems and devices, according to cybersecurity experts. Montreal-based cybersecurity specialist Steven Lachance emphasized the importance of prioritizing security and privacy as reliance on connected technology grows.
The attack targeted centralized control systems enabling remote temperature adjustments for fridges. Hackers gained access to these controls, raising fridge temperatures to extreme levels, causing food spoilage and potential fire hazards at numerous grocery stores. The Paris prosecutor’s office is investigating the cybercrime to assess the extent of the damage and identify the perpetrators. No group has claimed responsibility or issued any ransom demands yet.
The affected fridge control panels were manufactured by companies like Danfoss, Copeland, and Dixell. Danfoss mentioned that the impacted units were running outdated firmware or had reached the end of their support lifecycle, making them vulnerable to exploitation. A cybersecurity firm, Claroty, disclosed a vulnerability in Danfoss’s firmware, allowing unauthorized access for remote alterations. Danfoss promptly released a patch to address the issue.
These incidents underscore the significance of promptly implementing security updates to deter cyber threats. Ritesh Kotak, a Toronto-based tech analyst, highlighted that the food industry is a prime target for cyberattacks due to its crucial role. Previous cyber incidents within the industry, such as the JBS and United Natural Foods attacks, indicate a growing trend of disruptions in food distribution networks.
As more devices, including household appliances like fridges and thermostats, become interconnected, the risk of cyber intrusions escalates. Cybersecurity expert Lachance warned about potential privacy risks associated with internet-connected devices, urging caution in using such devices, especially those with audio and video recording capabilities. He advised storing sensitive data locally and ensuring devices are updated with the latest security patches.
The recent events in France serve as a stark reminder of the vulnerabilities present in interconnected devices and the urgent need for enhanced cybersecurity measures across various sectors.