Cyber-attack Affecting European Supermarket Refrigeration Systems

According to BBC UK, businesses within the UK's food supply chain experienced effects from a cyber-attack that targeted supermarket freezers and fridges throughout Europe on Monday. The National Cyber Security Centre (NCSC) confirmed awareness of "a couple of instances where vulnerable technology had been exploited in the UK."

The British Association of Independent Meat Suppliers (AIMS) informed the BBC that some of its more than 300 members unexpectedly became "collateral" due to the hacks. AIMS reported that two members observed their fridges beginning to thaw, and another member saw their cold units reach a temperature of 100C (212F).

AIMS spokesman Tony Goodger stated that the affected devices were empty at the time, meaning no produce was lost, but he urged businesses to remain vigilant. Goodger commented that the incident "must act as a reminder to all in the food industry at whatever point in the supply chain they are that their businesses may be seen by some as targets."

Supermarkets in nations including Ireland, Sweden, Estonia, and Belgium reported temperature increases in their fridges and freezers on Monday. The overnight hack reportedly targeted hundreds of stores, resulting in the spoilage of fresh and frozen food valued at an estimated millions of euros.

These attacks exploited weaknesses in certain systems used for remotely managing and controlling cold refrigeration units, vulnerabilities that had been identified by cyber-security researchers several months earlier.

On Tuesday, the NCSC's chief executive, Dr Richard Horne, told the BBC that it was still too early to determine who was responsible for the hacks. However, he noted that the attacks highlighted an urgent necessity for organizations to ensure the technology supporting various daily applications was secure and current. Horne observed that many firms had extended systems beyond their operational lifespan without upgrading them or isolating them from the internet, which cyber-security experts suggest creates easily exploitable weaknesses.

Dr Horne also mentioned that adversaries could find and exploit these systems more rapidly and simply through the use of "AI in the hands of our adversaries."

He advised that while organizations need to review their dependencies and invest in renewals, the ultimate responsibility rests with the individual business.

Regarding the UK, there have been minimal to no signs of similar impacts. Retailers are reportedly investing heavily in cybersecurity and are collaborating with the NCSC to enhance the security of their refrigeration units against potential attacks. Graham Wynn, assistant director of regulatory affairs at the British Retail Consortium, stated that retailers are working with the NCSC to secure their fridges and freezers against possible attacks.

In Belgium and Luxembourg, around 40 Delhaize supermarkets were affected by Monday's cyber incident, while a smaller number of shops were impacted in Sweden, Ireland, the Netherlands, Estonia, and Finland. Sabcobel, a Belgian company that manufactures some of the affected refrigerators, reported that the units' evaporators were switched to defrost mode, causing them to warm up. This method was believed to be the same one used in a previous incident in France last month.

Mathieu Tilman, who operates a Delhaize supermarket in Belgium, expressed that he found the situation "truly distressing," noting the contrast with people who are hungry. Paul Chichester, director of operations at the NCSC, mentioned at the launch of its annual report on Tuesday that the impact in the UK remains minimal, and the NCSC is working with organizations to identify and close existing vulnerabilities before they can be exploited.