Second cyberattack hits European supermarkets 
 
A second major cyberattack in less than a month targeting supermarket freezers and refrigerators across seven European countries, raises fresh concerns about the vulnerability of critical retail infrastructure. 

With the latest incident believed to have used the same attack technique deployed against French supermarkets last month, we talk to Iain Davidson, Head of Product Marketing at Wireless Logic about the growing need for stronger cyber resilience across the sector, and why building resilience and real-time monitoring must become the norm rather than the exception.

“The fact we have seen a second major attack on supermarkets less than a month after the recent incident in France shows that cyberattacks now reach well beyond data theft.  Compromised IoT infrastructure causes physical damage and heavy financial losses.  Disruption to refrigeration and cold-chain operations can have profound implications for food safety, supply chains and overall business continuity.  The risk extends to supermarkets, food distributers, logistic companies and manufacturers that rely on connected equipment to monitor temperatures and manager operations remotely.”

“A major vulnerability for many businesses is their reliance on aging operational technology.  Many refrigeration units and industrial controllers run outdated firmware that no longer receives regular security updates, yet they are often linked to remote management platforms over cellular, wired or Wi-Fi networks. Poorly secured connections give attackers a way in.  Once inside, they can issue new commands remotely, such as raising default temperatures to deliberately ruin food stocks, as we have seen in the recent wave of attacks.”

“Retrofitting security into older equipment is often difficult, so device-level protection alone is not enough.  An effective way to protect distrusted IoT fleets is network-level visibility.  AI-driven anomaly and threat detection solutions, which can identify the first signs of anomalous activity and automatically block communication to attacker IPs, that can stop a takeover or limit damage without any changes to the device themselves.”

“These events underline that it is not a matter of if a cyberattack will occur, but when.  No region or industry can assume immunity.  IoT cyber security can no longer sit solely with the IT team when essential services depend on connected systems.  Businesses need to prepare for an attack rather that assume it won’t happen to them.  To minimize the risk of disruption, product loss and financial cost, they must protect the connected infrastructure that underpins essential operations for the network level up.”

 ​