Cyberattack Hacks European Supermarket Fridges to 50°C, Spoiling Millions in Fresh Food.

Cyberattack Targets European Supermarkets by Manipulating Industrial Refrigeration Systems to Spoil Millions in Inventory

A coordinated cyberattack has struck major grocery retail chains across Europe, including France, Belgium, and the Netherlands. Rather than stealing sensitive corporate data or deploying traditional extortion ransomware, threat actors remotely compromised industrial cooling controllers, forcing commercial freezers and refrigerators into continuous defrost cycles that reached 50°C (122°F). The resulting heat buildup caused massive food spoilage across hundreds of retail locations overnight.

Exploitation Vectors, Vulnerable Firmware, and Operational Impact

• Exploitation of Legacy Industrial Controllers:

  • Targeting Internet-Exposed Hardware: The attack specifically exploited legacy software versions running on widespread refrigeration system controllers.

  • Forced High-Temperature Cycles: Standard commercial freezers undergo brief automated defrost cycles once or twice daily to prevent ice buildup. Threat actors overrode operational safety limits, locking heating elements into continuous execution and raising interior cabinet temperatures to 50°C.

• Widespread Retail Disruption Across Major European Chains:

  • Impacted Supermarket Brands: Affected networks include major European operators such as Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, along with regional grocers and wholesale outlets.

  • Mass Inventory Losses: Estimates indicate that between 250 and 350 individual supermarket locations experienced compromised cold chain systems. Store staff arriving for morning shifts discovered completely ruined fresh meat, dairy, produce, and frozen food aisles, leading to millions in discarded inventory and immediate store closures.

 

 

Source: Bleeping Computer 

💬 AI Content Assistant

Ask me anything about this article. No data is stored for your question.

Cyberattack Targets European Supermarkets by Manipulating Industrial Refrigeration Systems to Spoil Millions in Inventory

A coordinated cyberattack has struck major grocery retail chains across Europe, including France, Belgium, and the Netherlands. Rather than stealing sensitive corporate data or deploying traditional extortion ransomware, threat actors remotely compromised industrial cooling controllers, forcing commercial freezers and refrigerators into continuous defrost cycles that reached 50°C (122°F). The resulting heat buildup caused massive food spoilage across hundreds of retail locations overnight.

Exploitation Vectors, Vulnerable Firmware, and Operational Impact

• Exploitation of Legacy Industrial Controllers:

  • Targeting Internet-Exposed Hardware: The attack specifically exploited legacy software versions running on widespread refrigeration system controllers.

  • Forced High-Temperature Cycles: Standard commercial freezers undergo brief automated defrost cycles once or twice daily to prevent ice buildup. Threat actors overrode operational safety limits, locking heating elements into continuous execution and raising interior cabinet temperatures to 50°C.

• Widespread Retail Disruption Across Major European Chains:

  • Impacted Supermarket Brands: Affected networks include major European operators such as Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, along with regional grocers and wholesale outlets.

  • Mass Inventory Losses: Estimates indicate that between 250 and 350 individual supermarket locations experienced compromised cold chain systems. Store staff arriving for morning shifts discovered completely ruined fresh meat, dairy, produce, and frozen food aisles, leading to millions in discarded inventory and immediate store closures.

 

 

Source: Bleeping Computer