Cyberattacks on European supermarkets highlight vulnerabilities in refrigeration systems
A series of cyberattacks targeting refrigeration infrastructure in European supermarkets underscores the critical need for secure remote access control for operational technology.
Supermarket chains across Sweden, Belgium, and Luxembourg have reported a new wave of cyberattacks targeting their refrigeration systems. These incidents follow similar breaches in France, which resulted in significant food spoilage and operational disruptions after unauthorized parties manipulated cooling equipment.
Unlike conventional IT attacks aimed at data theft, these incidents target operational technology (OT), posing immediate physical risks. Michael Ferdinandsen, CEO of Secomea, stated that the shift from data-focused attacks to physical asset manipulation demonstrates why cybersecurity must extend beyond traditional enterprise networks to cover critical infrastructure.
The core challenge for retailers is balancing the operational necessity of remote maintenance with robust security. Many older refrigeration systems were designed for long-term reliability rather than modern connectivity, making them vulnerable when exposed to remote access without granular control. According to Secomea, companies often fail to distinguish between network access and equipment-level access, creating wide points of entry for attackers.
Secomea advocates for a dedicated OT security approach that restricts access at the individual asset level rather than granting broad network permissions. By centralizing management and auditing access logs, operators can monitor who interacts with specific equipment. This method is currently deployed by companies such as AK-Centralen, which oversees remote monitoring for over 1,500 retail locations.