Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
TL;DR
- A cyberattack affected refrigeration systems in supermarkets across France and other European countries.
- Attackers exploited vulnerabilities in internet-connected controllers, remotely activating defrosters and causing temperatures to rise significantly.
- The hack resulted in spoiled food and, in some cases, electrical fires.
- Vulnerable controller models from Danfoss, Dixell, and Copeland allowed remote administrator-level access due to critical security flaws.
- Failure to implement basic security measures such as using VPNs, IP allowlists, and changing default credentials contributed to the mass compromise.
- The motive behind the attack remains unknown, with possibilities including mass vandalism or a nation-state aiming for continental disruption.
- The incident highlights the tension between financial departments and security needs within businesses, emphasizing the importance of investing in cybersecurity.