Cyber Attack on French Supermarkets' Cooling Systems Causes Millions in Losses

Hackers have carried out a dangerous cyber attack targeting French supermarkets, deliberately raising the temperature of internet-connected refrigeration systems to 50 degrees Celsius, causing fires and destroying millions of euros worth of food. France's prosecutor's office disclosed that the attack, carried out during the night, targeted the refrigeration systems of internet-connected businesses. The temperatures at those locations were deliberately raised to 50 degrees Celsius. Because the impact of the incident could also reach other countries, France is now working with regional authorities to investigate the matter on a broad scale. According to Sakoya, a firm that studies cyber security, the impact of the attack has also reached Spain, Portugal, Poland, Germany and Belgium. While 80 stores of the famous French chain 'Carrefour' and 5 percent of 'Monoprix' stores were affected, the shelves of roughly 150 'Intermarché' stores remained heated for six hours overnight, forcing all food to be thrown away for health safety reasons. Carrying out such an attack on basic food supply systems is a dangerous and serious act the likes of which has never been seen before. Furthermore, Intermarché estimates that it faces millions of euros in financial losses within a single day as a result of the incident. European Retail Association Director General Christel Delberghe noted that this incident reveals the extent to which the security of food supply chains must be further strengthened. The attack is believed to have exploited a security weakness in software from the Danish company Danfoss, which is used to remotely access and repair supermarket refrigeration systems over the internet. Danfoss said the issue arose with systems using an expired Bauer firmware, and the company also said it continues to advise that systems always be updated and maintained. In August last year, another security team also flagged vulnerabilities in those systems. This is an attack similar to one carried out last month on sites supplying food to the United States military, and the French Retail Association (FCD) has now called on Danfoss to disclose full details of the matter. In connection with the incident, the Netherlands' largest supermarket chain, 'Albert Heijn', operated by 'Ahold Delhaize', has also taken some systems offline due to a cyber security issue. However, that side says it does not yet believe there is any link between the company and the French incident. The matter has also temporarily disrupted services on some of Ahold's popular websites in the United States.