European Refrigeration Cyberattacks Hit Supermarkets and Blood Banks, Prompting US Warning

The attacks turned refrigeration controls into a way to damage physical goods. Hackers remotely changed supermarket fridge and freezer settings, causing food to warm up and spoil, according to SecurityWeek.

By November 5, CNN Brasil reported a second attack affecting freezers in several European countries that week. In some cases, temperatures were raised to 50°C, causing food losses in supermarkets and shops.

The emerging explanation is basic security weakness rather than unusually advanced hacking. Kevin Curran, Professor of Cybersecurity at the University of Ulster, told Euronews that the attack was "not sophisticated" and that the vulnerabilities had been known for a long time.

On November 4, reports showed the threat had reached medical cold storage. Hackers took control of cold rooms holding blood plasma at three sites of France's national blood service and pushed temperature settings to extreme levels, The Next Web reported. Alarms caught the changes before plasma or samples were damaged.

The route into those facilities involved an outside supplier. According to BMJ, France's national blood service said a refrigeration monitoring and control supplier was hacked on Monday, raising temperature and defrost thresholds at three preparation or distribution sites.

By November 5, the reported supermarket disruption had widened. ARD Tagesschau reported that attacks which began against French supermarket cooling systems were also affecting German retailers.

That day, US authorities issued a broader warning. A joint government statement described an ongoing cyber threat affecting food, transportation and healthcare industries, according to TechCrunch.

On November 6, BleepingComputer reported that the FBI and CISA were warning of active attacks on industrial refrigeration and cold-chain monitoring systems worldwide. The potential consequences extended beyond spoiled stock to equipment damage and fire hazards.

By November 7, Euronews reported that hackers had probed European refrigeration systems weeks before the attacks. Its coverage also described concerns that similar weaknesses could expose hospital and data centre infrastructure.

The French blood storage attack was serious, but it did not destroy blood products or samples. French authorities said the attempt was thwarted before it could cause damage, France24 reported. That distinction separates the medical incident from supermarket attacks that caused food losses.

The warnings now reach beyond European retailers. US regulators described ongoing threat activity targeting industrial refrigeration and cold-chain monitoring systems, The Hindu reported on November 7. Separately, a healthcare intelligence-sharing organisation urged its members to lock down systems, according to NPR.

Responsibility remains unresolved in the supplied reporting. RTBF reported on November 5 that Russia denied involvement. That denial does not establish who carried out the attacks.

The immediate test is whether operators secure equipment that can be reached remotely. US government recommendations include disconnecting industrial smart freezers from the internet, applying patches and changing default passwords, according to The Register.

The other question is how widely the same weaknesses exist outside food retail. Euronews reported expert concerns about hospital and data centre infrastructure. The French incident also puts suppliers under scrutiny: one compromised monitoring and control provider affected three blood service facilities, according to BMJ.