Fridge hack costing millions and sparking fires stemmed from poor security
ars ·
A widespread cyberattack compromised refrigeration systems in approximately 700 supermarkets across Europe, leading to significant food spoilage and electrical fires. The incident primarily affected stores in France, with reports also indicating impacts in Spain, Portugal, Poland, Germany, and Belgium. Attackers exploited internet-connected controllers from manufacturers Danfoss, Dixell, and Copeland to remotely activate defrosters, causing temperatures to rise dangerously high. Security researchers identified that these devices contained critical vulnerabilities, including predictable daily passwords and unpatched firmware flaws. The breach was facilitated by poor cybersecurity hygiene, such as leaving devices exposed to the public internet without VPNs or IP allowlists. Experts emphasized that standard security measures could have easily prevented this costly disruption. While the attackers remain anonymous, the motive is speculated to be either mass vandalism or a coordinated effort by a nation-state actor. This event highlights the severe financial and operational risks associated with neglecting basic digital security protocols for industrial equipment.
ars