European Stores Report New Attacks on Refrigeration Controllers

Summary

Stores in six European countries reported attacks that allegedly raised refrigeration temperatures and spoiled food. Danfoss StoreView controllers may be involved, but the link is unconfirmed; Censys also reports global exposure and patching figures.

Key points

Stores in Belgium, Estonia, Ireland, Luxembourg, the Netherlands, and Sweden reported attacks on commercial refrigeration controllers.
Refrigerator temperatures were reportedly raised to 50°C, spoiling or melting food in dozens of stores.
Carrefour, Coop, Delhaize, ICA, Selver, SuperValu, and Spar were among the chains reported to be affected.
Reports suggest Danfoss StoreView controllers were involved, but this has not been confirmed; no group claimed responsibility.
Censys observed just over 1,000 exposed StoreView instances globally, with France having the most.
Censys counted 220 exposed instances in France, down from 1,825 before the October attacks; 41% appeared to run patched firmware. The reported patched shares were 68% in Belgium and 58% in Sweden.

Article Details

Victim Organization: Carrefour, Coop, Delhaize, ICA, Selver, SuperValu, and Spar were among the chains reported as impacted; individual affected stores were not identified.
Incident Type: Reported cyber attacks targeting commercial refrigeration controllers, with temperatures reportedly raised remotely.
Operational Impact: Refrigeration temperatures in some stores were reportedly raised to 50 degrees Celsius (122 degrees Fahrenheit), causing spoiled or melted food in dozens of stores.
Ransom Or Extortion: Unknown; the article does not report ransom or extortion activity.
Claim Status: alleged

Vendors

DanfossReports suggest Danfoss StoreView refrigeration controllers, the product involved in October 11 attacks on French grocers, is also involved in this wave of attacks.

Products

Danfoss StoreViewReports suggest Danfoss StoreView refrigeration controllers, the product involved in October 11 attacks on French grocers, is also involved in this wave of attacks.

Countries

BelgiumOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.EstoniaOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.IrelandOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.LuxembourgOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.SwedenOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.the NetherlandsOvernight on Monday, November 2, grocers, butchers, and small shops across Belgium, Estonia, Ireland, Luxembourg, The Netherlands, and Sweden reported cyber attacks on store refrigeration units.