Hackers targeted remote-controlled refrigeration systems across Estonia, Sweden, and Belgium on Monday, forcing temperatures in display cases up to 50 degrees Celsius in an apparent wave of digital disruptions hitting European supermarkets.
Estonian Refrigeration Controls Breached
In Estonia, a major grocery store chain suffered a cyberattack on Monday morning when criminals gained access to a computer used for remote management of the store’s refrigeration system, “Kitman Coldtech” managing director Jaan Mutso told the Estonian public broadcaster ERR. The attackers raised the temperature in a refrigerator showcase to 50 degrees Celsius. Mutso declined to identify the specific store chain targeted, though “Kitman Coldtech” lists chains such as Selver, Rimi, Coop, and Lidl among its clients on its website. Marianne Jervela, communications manager for the “Selver” retail chain, told lsm.lv that one of its stores without an updated security system was affected by the cyberattack. Mutso stated that the attack method mirrors incidents from October in France and the Netherlands, where digital supermarket refrigeration systems were also manipulated.
Outdated Controllers Target Vulnerabilities
The intruders specifically targeted computers controlling older generations of “Danfoss” refrigeration systems by searching for vulnerabilities in specific devices, according to Mutso. While retail chains have generally updated their controllers, older and unpatched units remain installed in some facilities, making them primary targets for hackers. Damages were avoided because staff reacted to the temperature spikes within ten minutes. However, Mutso warned that tampering with digital systems poses a direct threat to food safety and can generate significant financial losses.
Nordic and Benelux Retailers Report Equipment Failures
Grocery chains in Sweden, Belgium, and Luxembourg experienced parallel disruptions to their cold storage equipment. In Sweden, the “Ica” and “Coop” chains reported technical problems stemming from a suspected cyberattack. The “Sweden Herald” reported that “Ica” stores in Stockholm and the Skåne Municipality of Sjöbo suffered refrigeration malfunctions on Monday night, while six “Coop” locations in Sweden also confirmed cyberattacks. In Belgium, hackers raised temperatures in the freezers of 15 “Carrefour” stores, a company spokesperson confirmed. “Colruyt” and “Intermarche” locations in Belgium likewise experienced freezer malfunctions, though management for those chains did not officially confirm a hacker attack.
Comparison With Prior European Incidents
Monday’s incidents follow a larger digital assault in France several weeks prior that affected several hundred grocery stores. In the French attacks, hackers pushed refrigeration temperatures as high as 80 degrees Celsius, causing multiple cooling units to catch fire.
Hackers Raise Storage Temperatures in Estonia and Belgium
Which specific grocery stores were attacked in Estonia?
“Kitman Coldtech” managing director Jaan Mutso declined to name the primary affected chain in his public statements. However, “Selver” communications manager Marianne Jervela confirmed that one un-updated “Selver” store suffered a breach.
How high did hackers raise the temperatures in the affected stores?
In Estonia, hackers raised storage temperatures up to 50 degrees Celsius. In Belgium, temperatures were raised in the freezers of 15 “Carrefour” stores. During a prior wave of attacks in France, temperatures reached up to 80 degrees Celsius, triggering device fires.
What specific equipment was targeted by the hackers?
The attackers breached computers controlling older-generation “Danfoss” refrigeration systems that lacked recent security updates and remote-control patches.
Related reading