A mass hack targeting supermarket refrigeration controllers likely cost tens or hundreds of millions of euros across Spain, Portugal, Poland, Germany, and Belgium. The breach stemmed from outdated firmware and failure to implement basic cyber hygiene, including VPNs, IP allowlists, and credential changes. Researchers at Pen Test Partners stated that proper cyber hygiene—such as removing controllers from the public internet, using VPNs and IP allowlists, managing third-party devices securely, changing default credentials, and patching firmware—would have prevented the attack.
Claroty and CISA had previously warned about these risks. Danfoss acknowledged a vulnerability in discontinued, end-of-life controllers and said it is working with customers to prevent future incidents. The attackers remain unidentified, raising possibilities of vandalism or nation-state involvement aimed at continent-wide disruption.
The incident highlights the ongoing tension between financial and security priorities in businesses, where investment in security is often deferred until after a breach. Affected supermarket chains are now learning costly lessons, though it remains uncertain whether this will prompt broader change across industries.
Source: Ars Technica · Summarized by HeadlinesBriefing