Recent Cyber-Attack Disrupts Supermarkets Across Europe

A wave of cyber-attacks has targeted dozens of supermarkets across seven European nations, impacting their refrigeration systems. This incident has raised significant concerns about cybersecurity within the retail sector.

The Scale of the Attack

Approximately 40 Delhaize supermarkets in Belgium and Luxembourg were directly affected, with additional impacts noted in Sweden, Ireland, the Netherlands, Estonia, and Finland. Sabcobel, a Belgian manufacturer responsible for some of the compromised refrigeration units, reported that the units’ evaporators were switched to defrost mode, resulting in significant temperature increases. This method mirrors an earlier attack from last month that disrupted several supermarkets in France.

Consequences for Businesses

Local reports indicate that millions of euros worth of perishable food items were discarded following similar incidents in October. The CEO of Sabcobel, Stephan Moelans, confirmed in a statement to the Belga news agency that this latest incident was indeed a cyber-attack. He mentioned that the company has been working diligently to disconnect the affected units from the network, operating throughout the night to mitigate damage.

Security Measures Post-Attack

Moelans emphasized that since the attack in France, efforts have been made to enhance the security of refrigeration units against future vulnerabilities. He explained that addressing these issues requires physical modifications to the systems rather than just software updates.

The Broader Implications

Most supermarkets across Europe rely on internet connectivity for maintenance and troubleshooting, which can often be managed remotely. “The simplest solution is to manage the fridges over a secure internet connection,” Moelans remarked, highlighting that many clients had transitioned to this safer method following previous attacks.

Temperature Risks

Reports indicated temperatures in several affected freezers climbed to as high as 50°C (122°F), jeopardizing food safety and leading to potential economic losses.

Ongoing Investigations

The identity of the attackers remains uncertain. In the United States, authorities are currently examining potential links between this incident and refrigeration failures at various military bases occurring in August. National cybersecurity agencies in both Belgium and Sweden are actively monitoring the situation. The UK’s National Cyber Security Centre is collaborating with international partners to gain a comprehensive understanding of these developments, although there have not yet been any reported incidents in the UK.

Local Impact and Responses

For instance, a Delhaize branch in Hoeilaart, located in Flanders, reported losses of around €100,000 (£83,500) in damaged produce. This estimate does not account for the expected further losses due to shop closures. Carrefour, a supermarket chain based in France, stated that only 15 of its Belgian stores experienced issues and announced that immediate measures had been implemented to keep operations running. Additionally, the Colruyt Group noted that five of its Spar franchise locations were also compromised.

Further Affected Retailers

Ikea, the budget furniture retailer, confirmed that the refrigeration systems at its Mons location in Belgium were impacted as well. A spokesperson for the company acknowledged the possibility of additional locations being affected.

Conclusion

This recent cyber-attack highlights the pressing need for enhanced security measures in the retail industry. As supermarkets increasingly rely on interconnected systems, safeguarding these networks has never been more critical.

• A cyber-attack impacted refrigeration systems in supermarkets across seven European countries.
• Dozens of Delhaize supermarkets in Belgium and Luxembourg were among the hardest hit.
• Millions of euros in perishable goods were lost due to the rising temperatures in freezers.
• Various companies and national agencies are investigating the incident and its implications.