Cyberattack Hits European Cold Storage: French Blood Supply & Supermarket Fridges Affected

European authorities are currently investigating widespread cyberattacks that have targeted refrigeration systems across numerous supermarkets throughout Europe, causing significant disruption to the food supply chain. Initially impacting hundreds of French food retail stores in October, the attacks have since spread to other European countries, including Belgium, Luxembourg, Sweden, Estonia, Ireland, Finland, the Netherlands, Germany, Italy, Portugal, and the UK. These sophisticated intrusions remotely altered refrigeration settings, leading to widespread food spoilage as temperatures were forced to rise, in some cases to as high as 50°C (122°F).

In a concerning escalation, the cyberattacks also affected cold storage facilities belonging to France's national blood service (EFS) in early November. Hackers accessed control units for fridges containing vital blood samples and plasma, attempting to raise temperatures from their usual -30°C to an alarming 110°C (230°F). Fortunately, EFS monitoring and alarm systems detected the anomalies swiftly, allowing technicians to intervene and transfer products to other facilities before any blood supplies were compromised or destroyed.

Investigations suggest that the cybercriminals exploited vulnerabilities in older or poorly secured refrigeration supervisors, including exposed interfaces, insufficient remote maintenance protection, and weak passwords. This series of incidents highlights a critical vulnerability in interconnected industrial control systems and has prompted calls for enhanced cybersecurity measures and greater European cooperation to safeguard essential infrastructure.