Cyber security experts emphasize the recent cyberattack on French supermarkets, which resulted in the spoilage of food in many fridges, as a critical lesson on the risks associated with internet-connected systems and devices. According to Montreal-based cybersecurity expert Steven Lachance, the security and privacy of connected technology must be a top priority as reliance on such systems increases.
The attack targeted centralized control systems that regulate fridge temperatures remotely, enabling hackers to manipulate the temperatures, causing food spoilage and potential fire hazards in numerous grocery stores. Investigations by the Paris prosecutor’s office and the ANSSI cybersecurity agency are ongoing to assess the extent of the damage and identify the perpetrators.
The affected fridge control panels, manufactured by Danfoss, Copeland, and Dixell, were compromised due to outdated firmware and security vulnerabilities. A report by cybersecurity firm Claroty highlighted a specific vulnerability in Danfoss’s firmware that allowed unauthorized access for making remote changes. Prompt implementation of security updates is crucial to mitigate such risks, as outdated firmware can make systems more susceptible to attacks.
The incident in France, affecting around 700 supermarkets, underscores the vulnerability of the food distribution system to cyber threats. Similar attacks have targeted major food suppliers in the past, emphasizing the need for heightened cybersecurity measures in the industry. As the food industry increasingly adopts digital technologies for processing and distribution, ensuring digital literacy and proactive security measures become imperative to prevent cyber incidents.
The accessibility of internet-connected devices, from commercial systems to household appliances like thermostats and fridges, poses a broader security challenge. These interconnected devices, often termed “smart” appliances, are potential targets for hackers seeking to exploit security vulnerabilities. Montreal-based expert Lachance warns that devices with audio and video recording capabilities present significant privacy risks and advises caution in using such devices, especially in cases where internet connectivity is unnecessary.
