Cyberattack Cripples European Supermarkets, Threatens Blood Bank Refrigeration

A widespread cyberattack that initially targeted European supermarkets has also impacted cold storage facilities crucial for France’s national blood service. Hackers reportedly gained access to control units for refrigerators storing blood samples and manipulated them to dangerously increase temperatures to 110C. This incident follows a pattern of cyberattacks that have forced supermarkets across eight European countries to discard significant amounts of food due to compromised refrigeration systems. The attack is identical to one that affected numerous French supermarkets approximately three weeks prior.

Coolworld, a company responsible for storing containers for the French Blood Establishment (EFS) as part of its health monitoring system for blood transfusions, was among the affected entities, according to Le Canard. Fortunately, the temperature increase from the standard -30C was detected in time, and France’s Health Ministry confirmed that the incident had no operational impact due to early detection.

In Sweden, the supermarket chain Coop is transitioning its systems to 5G networks and newer modems, moving away from 4G connections, a process that had already commenced following the French incident. A spokesperson for Coop stated that the seven affected stores are operational again, but their refrigeration systems have been disconnected from the internet. The company is conducting a thorough review of its entire network to identify and address any potential vulnerabilities.

Software provider Danfoss, whose systems were again targeted, has been actively assisting customers in managing the situation and advises against direct internet accessibility for these systems. Frank Groenewegen, a cybersecurity expert at Deloitte in The Hague, urged retailers to take immediate action: identify vulnerable refrigerator controllers, check internet connectivity, ensure the latest security updates are installed and supported by the manufacturer, and disconnect any unknown systems from the public internet as a precautionary measure. He emphasized that while disconnection doesn't fix the root cause, it effectively isolates the systems from further attacks.

German supermarket operator Edeka reported that a store in Reisbach, Germany, experienced a fridge hack, noting the absence of standardized refrigeration systems across its network of independently operated stores. The EU cybersecurity agency ENISA highlighted that the large-scale nature of these attacks on the retail sector across multiple member states underscores the critical need for European cooperation, swift information sharing, and coordinated responses to cyber incidents.

In Britain, attempts to target small meat-processing firms by hackers had minimal impact, according to Richard Horne, chief executive of the National Cyber Security Centre (NCSC). The NCSC is collaborating with organizations to identify and rectify vulnerabilities before they can be exploited. Mr. Horne warned that the supermarket fridge attacks may be an early indicator of increasingly frequent disruptions as outdated technology struggles to keep pace with evolving cyber threats.