Supermarket freezers hacked: tens of millions of euros of food thrown away

Attackers remotely switched internet-connected fridges to defrost. Around 700 French grocery stores lost food worth an estimated tens of millions of euros, then stores in 10 more countries were hit.

How they got in

Refrigeration controllers linked to the internet.

The damage

In October, around 700 French grocery stores threw away food with losses estimated at tens of millions of euros. In November, more than 100 stores across Europe had freezers reach 50°C. French blood-bank cold rooms were also targeted, but alarms caught it and no blood products were lost.

Board takeaway

Building and cooling controls are business systems. Keep them off the open internet and alert on unusual changes.

What to do this week

• Ask your facilities provider which building systems can be reached from the internet.
• Require multi-factor sign-in for any remote maintenance access.
• Set alerts for temperature or setting changes outside working hours.