Cyber Chaos Strikes French Supermarkets
In a startling cybersecurity incident, several major supermarket chains in France experienced widespread disruption as hackers targeted their refrigeration systems. The attack affected over 400 stores, causing refrigeration units to malfunction and spoiling fresh and frozen products on a large scale.
Names like E Leclerc, Intermarche, and Cooperative U were among those hit by the attack, with the latter’s CEO describing the incident as truly unprecedented. With food safety being compromised, the situation has raised significant concerns about the security of food supplies.
Moreover, Paris prosecutors have launched an investigation into the cyberattack, which not only affected refrigeration systems but also reportedly led to fires in some stores. The cyberattack reflects the increasing risk faced by critical infrastructure in sectors beyond tech, targeting components crucial for food preservation.
Legacy Systems Targeted
It was identified that the hackers exploited security weaknesses in refrigeration equipment supplied by Danish manufacturer Danfoss. Many of these systems, particularly the AK-SM800 and AK-SC355, are older models no longer receiving necessary software updates, leaving them vulnerable to attacks. Despite prior warnings to update their systems, many retailers continued using outdated technology.
The French cyber security agency has identified vulnerabilities in the software and is in contact with affected vendors to mitigate the risks. Cooperation with European counterparts is underway, as the possibility of further incidents in other countries remains a concern.
Efforts for Damage Control
Efforts are now focused on damage control, as French authorities work to address the consequences and prevent further incidents. Dominique Schelcher from Cooperative U emphasized the unprecedented nature of the attack and its significant threat to food supply and public safety. An investigation aims to unravel the full scope, including potential links to Russian strategies following France’s support for Ukraine.
This incident is symptomatic of a broader trend of hybrid attacks across Europe, where industrial equipment increasingly connected to the internet is subject to cyber threats. The attack on France’s retail sector is a testament to the sophistication and potential devastation such cyber threats pose to national infrastructure.
Photo by Jay Kettle-Williams on Unsplash
