A series of cyberattacks targeting smart refrigeration systems in European supermarkets has led to significant food spoilage and financial losses for retailers. These incidents, which saw hackers remotely increase freezer temperatures, are prompting a global re-evaluation of cybersecurity measures for connected commercial infrastructure.
Widespread Disruption Across Europe
Reports indicate that supermarket chains in Sweden, Belgium, Luxembourg, and Ireland have been affected. Retailers such as ICA and Coop in Sweden, Carrefour, Colruyt, and SPAR in Belgium, and Musgrave's SuperValu stores in Ireland confirmed incidents where cooling systems were compromised. At one ICA franchise in Stockholm, freezer temperatures reportedly soared to 50 degrees Celsius, rendering vast amounts of food unsellable. An IKEA store in Belgium was also among the impacted sites.
These recent events follow a separate attack in France in October, where hundreds of supermarkets experienced similar cooling control breaches, leading to both food losses and, in some cases, fires. Danish company Danfoss, a supplier of temperature-control technology used in some affected European systems, has confirmed it is actively working with its customers to implement necessary fixes. Investigators have yet to determine the perpetrators or whether these attacks are interconnected.
US Military Stores Also Investigating Suspected Cyberattacks
The Pentagon is currently probing freezer failures at at least six US military commissaries in August as potential cyberattacks. At Fort Huachuca in Arizona, for instance, freezers allegedly switched into defrost mode, resulting in spoiled food. The exact cause of these failures remains under investigation, but the pattern mirrors the European incidents, underscoring a broader vulnerability in smart refrigeration systems.
Could India's Smart Refrigeration Systems Be Next?
While there are no confirmed reports of similar smart refrigeration cyberattacks in Indian supermarkets, the incidents in Europe and the US highlight a critical cybersecurity concern for India's rapidly expanding connected infrastructure. Commercial refrigeration equipment that allows for remote monitoring and control introduces new potential entry points for unauthorized access if not adequately secured.
The Telecommunication Engineering Centre (TEC) in India has issued a Code of Practice for Securing Consumer Internet of Things (IoT) devices. Although not specific to commercial refrigeration, this code emphasizes the need for secure communication protocols, regular software updates, and robust access controls for all connected devices. Experts stress that businesses must prioritize the cybersecurity of their connected infrastructure, including commercial cooling systems, recognizing that the threat extends beyond data theft to physical disruption and significant financial damage. The focus remains on commercial systems, not typical household smart refrigerators.