Widespread attacks targeting internet-connected refrigerators raised temperatures in cold storage units across Europe and the US this week, according to Wired, exposing severe risks in everyday connected devices. The incidents affected blood banks in France and supermarket chains in multiple countries, forcing organizations to throw away spoiled food and safeguard vital medical supplies.
Key takeaways
- Three French sites handling blood and plasma bags were briefly impacted by temperature spikes on November 2.
- Supermarket chains in at least 11 European countries experienced similar refrigerator tampering that ruined massive amounts of food.
- Investigators found that attackers exploited unpatched temperature controllers connected directly to the internet.
- The Pentagon is actively investigating similar incidents that affected grocery stores on US military bases in August.
What are internet of things security risks in refrigeration systems?
The recent wave of attacks highlights how basic digital security flaws in connected hardware can create massive physical disruptions. Wired reports that the intrusions stem from threat actors exploiting unpatched refrigeration controllers exposed to the internet. Some of these vulnerable software versions allegedly relied on weak passwords formulated directly from calendar dates, making them easy targets for unauthorized access.
Many of the compromised devices were manufactured by the Danish firm Danfoss. Researchers point out that executing these intrusions did not require advanced or sophisticated hacking techniques. Danfoss did not return requests for comment regarding the vulnerabilities found in its hardware.
How did the refrigerator attacks impact vital supplies?
In France, the Établissement Français du Sang confirmed that cold rooms holding blood products saw significant temperature hikes on November 2. Fortunately, staff members and automated alarm facilities spotted the changes quickly enough to implement fail-safe measures, preventing any actual damage to the blood samples. Similar incidents in October forced hundreds of French stores to trash huge quantities of food.
Supermarket chains in at least 11 European countries suffered comparable disruptions over recent days, leading to widespread food spoilage. Back in August, roughly six commissaries and grocery stores on US military bases experienced identical temperature manipulation. Reuters reported that the Pentagon is currently investigating these events in collaboration with French law enforcement agencies.
What it means for critical infrastructure defense
The sprees serve as a stark reminder that cybersecurity fundamentals remain vital for digital defense, even as organizations race to address new artificial intelligence threats. Longtime critical infrastructure researcher Josh Corman tells Wired that our dependence on connected technology outpaces our protection efforts. As investigators work to determine whether a single group or multiple actors are responsible, experts warn that fragile cold-chain systems require urgent attention to prevent future failures.
Frequently asked questions
Attackers raised the temperatures of internet-connected refrigerators, affecting blood storage sites in France, supermarkets in 11 European countries, and grocery stores on US military bases, which resulted in spoiled food.
No, the blood samples were not altered or damaged because staff and alarm facilities quickly detected the temperature changes and put fail-safe measures in place.
Many of the hacks stem from vulnerabilities in temperature controllers made by the Danish firm Danfoss.
It remains unclear who is behind the incidents, and investigators do not yet know if the attacks are all connected or being carried out by multiple different actors.
The Pentagon is investigating the incidents that affected commissaries and grocery stores on US military bases in August and is collaborating with French law enforcement.
Based on reporting by Wired. Read the original article
