Cyber-attacks on refrigeration systems threaten Europe – Danish authorities investigate threat
The Danish Centre for Cyber Security is investigating whether Danish supermarkets have been hit by cyber-attacks affecting shops in France, Belgium, Ireland and Sweden.
Danish authorities warn: Cooling and freezing systems in supermarkets under cyber-attack
The Danish Centre for Cyber Security is mapping whether Danish supermarkets have been affected by cyber-attacks on cooling and freezing units that have already hit supermarkets in France, Belgium, Ireland and Sweden, the authority said according to Jyllands-Posten.
"The centre is following the situation closely and is in dialogue with relevant authorities and companies, including to determine whether Danish companies are affected," according to a press release from the authority.
Affected foreign supermarkets report that the temperature in freezing and cooling systems has been set to 50 degrees as a result of the attacks.
Specific security recommendations
The authority emphasises that similar attacks could strike Denmark and calls on authorities, companies and organisations to immediately review the security of their cooling and freezing systems. Specifically, the authority recommends investigating whether refrigerators, freezers or associated control systems are directly accessible from the internet, and ensuring that the equipment is updated with relevant security patches.
If there are signs of compromise, the matter should be reported to police and the incident should be reported.
Previous attack hit Danish technology
A similar attack took place in October, when hundreds of French grocery shops were hit by a cyber-attack in which the temperature in the cooling systems was likewise turned up. On that occasion, it was thermostats from the Danish company Danfoss that had been hacked.
Business organisations demand action now
The authority has contacted Dansk Erhverv and asked the organisation to inform its member companies broadly about the incidents. Chief consultant Joen Magieres from Dansk Erhverv is clear: "Dansk Erhverv's message to companies is therefore clear: Get your business-critical IT systems reviewed as quickly as possible, either with your own IT staff or together with your suppliers."
Dansk Industri backs up the call. Jeppe Engell, chief consultant at DI with expertise in cyber security, warns directly: "A cooling control system that can be reached from the internet is an open door into food shops. That door must be closed now, not after the first Danish attack." He urges shops to contact their cooling companies and ask whether the systems can be accessed from outside.
Source: Jyllands-Posten