Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
No documented attacks against American supermarkets…yet
The US federal government is warning grocery store owners and operators to bolster their cyber defenses, particularly concerning industrial smart freezers. FBI Cyber Branch Operations Director Brett Leatherman stated, "We are seeing these systems targeted across critical infrastructure sectors globally, putting inventory and equipment at risk."
Since mid-October, hackers have targeted thousands of remote-controlled refrigeration systems in grocery stores across Europe, causing temperatures to rise to 50°C and resulting in spoiled food and fires.
The US government agencies, including the FBI, Cybersecurity and Infrastructure Security Agency (CISA), Health and Human Services, Agriculture, and Transportation departments, have issued an advisory to warn about ongoing cyber threats to industrial refrigeration and cold-chain monitoring systems. The agencies advise operators to disconnect these systems from the internet, apply patches, change default passwords, and implement additional security measures.
These include creating a separate VLAN for operational technology (OT) devices, using strong, unique passwords with phishing-resistant multifactor authentication, and timely patching of devices.
While there are no documented attacks on US systems, a Dutch grocery giant, Ahold Delhaize, took proactive measures by disconnecting IT systems following a cyberattack that affected its US and European brands. The Pentagon also suspects a series of freezer malfunctions at military bases across the US in August as a possible cyberattack. The government agencies emphasize that attackers can exploit vulnerabilities to alter settings, causing widespread inventory loss and equipment hazards.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
