Supermarket refrigeration attacks highlight operational technology security gaps
A surge of cyberattacks targeting European supermarket refrigeration systems is forcing retailers to reassess how they secure operational technology against unauthorized remote access.
Supermarket chains across Europe are responding to a wave of suspected cyberattacks affecting cooling infrastructure. Recent incidents in Sweden, Belgium, and Luxembourg follow similar attacks in France, where compromised refrigeration systems resulted in significant food spoilage and operational disruptions.
Unlike traditional cyberattacks that target data, these incidents exploit operational technology (OT)—hardware not typically designed with modern security protocols in mind. Michael Ferdinandsen, CEO of industrial cybersecurity firm Secomea, notes that while retailers require remote connectivity for maintenance, the current challenge lies in the lack of granular control over who can access specific equipment.
Secomea advocates for an OT-native architecture that restricts connections to individual assets rather than granting broad network access. This methodology is currently applied by organizations such as Denmark’s AK-Centralen, which monitors refrigeration for over 1,500 locations using secure gateway technology.
As retail chains and other infrastructure managers rely increasingly on third-party remote services, experts suggest that visibility, audit logs, and strict access governance are essential to prevent physical operational damage. The incidents underscore a broader industry requirement to harmonize system performance with robust security architecture.