Cyber-attack hits Estonian supermarket as hackers target refrigeration systems across Europe
Incidents involving supermarket refrigeration systems have been reported in at least 11 European countries. In Estonia, one shop of the Selver chain was hit, with a freezer setting raised to 50°C.
Hackers have broken into a computer controlling refrigeration equipment at one shop of the Selver supermarket chain in Estonia, altering its temperature settings. It is one of the incidents reported in at least 11 European countries involving supermarket cooling and freezing systems.
At the affected Selver outlet, a freezer setting was raised to 50°C (122°F). The intrusion was detected and stopped quickly, so goods were not damaged. Selver said it was the last shop in its chain still using an older refrigeration control system, an older Danfoss model.
Estonia's State Information System Authority said it had received one report, from Selver, and knew of no other incidents. Kitman Coldtech, Selver's refrigeration partner, had earlier said other Estonian clients were also targeted, but no additional shops have been publicly confirmed.
Incidents across Europe
The latest tally puts the number of affected countries at no fewer than 11, as Romania, Germany and the UK joined earlier reports from countries including Estonia, Sweden and Belgium. The tally includes cases still under investigation, and accounts may change. In Sweden and Belgium, some stores had to pull chilled and frozen products from sale.
The latest wave follows a major incident in France last month, when attackers manipulated refrigeration systems at hundreds of supermarkets. Food losses were estimated at tens of millions of euros.
Why it is possible
Commercial refrigeration systems are increasingly monitored and controlled remotely. This lets retailers manage equipment across many sites, but can give attackers a way in if controllers are exposed to the internet or poorly protected. Unlike office computers, industrial equipment can stay in service for years without software updates, partly because taking it offline can disrupt operations.
Kitman Coldtech said the method resembled attacks reported elsewhere, but any link between the incidents is unconfirmed. No group has claimed responsibility, and the motive is unknown.
The Refrigeration Association of Estonia has urged operators to check that controls cannot be accessed openly online, update software, change default passwords and review remote access.
