The cyberattacks on commercial refrigerators and freezers in Europe continue, as a slew of grocery stores in Belgium, Ireland, Luxembourg, and Sweden report widespread food wastage as a result of miscreants raising the temperatures to highs of 50ºC (122°F).
In Belgium, around 40 Delhaize stores were affected after the attackers reportedly switched fridges and freezers into defrost mode overnight, between Sunday and Monday, resulting in stock issues.
Diego Louwers, a Proxy Delhaize store manager in Overijse, near Brussels, told RTL Info that the consequences of the cyberattacks were “catastrophic,” forcing the store to throw out the entirety of its fresh and frozen products.
“We can’t have anything worse in our line of work,” he said. “We have to throw away all of our merchandise, and it’s both heartbreaking and very complicated operationally.”
A Delhaize spokesperson said it took steps to ensure stores remain stocked, although fresh and frozen products are “temporarily somewhat limited.”
I rather want to trot out The Onion’s recurring hed of “no way to stop this” on mass shootings. We seriously had this happen a month ago, and these stores still decided remote control of cooling systems was a grand idea.
How did we ever exist without our fridges not being connected to the internet!
With giant blocks of ice, of course!
I rather want to trot out The Onion’s recurring hed of “no way to stop this” on mass shootings. We seriously had this happen a month ago, and these stores still decided remote control of cooling systems was a grand idea.
It’s one thing to enable remote monitoring and another to not bother patching even after a similar attack caused chaos a few weeks ago.
“In the French attack, the hackers pirated controllers mostly supplied by the Danish company Danfoss, which said subsequently that it had identified some security flaws last year and had “long recommended” customers install updates.”
More than likely, these companies simply got rid of most of their IT/opsec teams and those savings are now biting them in the arse.
Other retailers, such as Coopérative U, confirmed they were not Danfoss customers.
RTFA
And this means that the fridge manufacturers are liable for damages, right? Right?
Do stores have a choice in this? Or do the refrigerators need an internet connection because of DRM? Or are the refrigerators connecting via an embedded cellular modules like in cars?
From what I read last time this happened, they allow monitors at a central location to remotely change the temperature as needed. Which feels like a massive security risk that the connection is internet facing, or even exists at all. I understand monitoring temperatures from a central location, but there should never have been remote controls for the freezer temperature. That just creates a giant singular point of failure for all of the fridges.
This is the reason for all the govt prepping advice. Lean supply chains and agentic hacked systems isn’t going to end well
