conv.

All stories
SecurityQuiet 9d · day 9

Supermarket fridge cyberattack spreads from France to Belgium, Luxembourg, Sweden

Hackers remotely forced refrigeration units into defrost mode at Ahold Delhaize, Carrefour and Spar stores, echoing an October attack in France.

What to know

  • An 'IT incident' hit fridges and freezers at dozens of Ahold Delhaize-linked supermarkets (Delhaize, Carrefour, Spar) in Belgium and Luxembourg on 2 November, using the same evaporator-defrost method as an October attack on hundreds of French stores.
  • Swedish supermarkets reported similar refrigeration disruption the same day, indicating the campaign is not limited to one country.
  • Fixing the vulnerability reportedly requires physical modifications to the units, not just software patches, according to the official managing the response.
  • Coverage is drawing broader attention to how internet-connected appliances, routers and vehicles create new attack surfaces beyond traditional IT systems.

“Personally, I've been awake since 2 am. We've been working all night and morning to disconnect the affected units from the network.”

Moelans, Official overseeing refrigeration response · BelgaShare.be ↗ · Nov 1

Ahold Delhaize Affected supermarket groupMoelans Spokesperson managing the Belgian refrigeration responseCarrefour Affected supermarket chainSpar Affected supermarket chain

Supermarket fridge cyberattack spreads from France to Belgium, Luxembourg, Sweden
Investing.com News

How it unfolded 4 developments, newest first · click a bar or a number to jump articlesvideosposts

Peak 4 pieces in 3h at Nov 8, 9 AM; 20 pieces over 9 days (11 articles · 1 video · 4 posts · 4 comments) Nov 1, 6 PM — 1 piece · 1 post — Mastodon 1Nov 1, 9 PM — quietNov 2, 12 AM — quietNov 2, 3 AM — 2 pieces · 2 articles — Google News 1, Newswires 1Nov 2, 6 AM — 2 pieces · 2 articles — Newswires 1, Google News 1Nov 2, 9 AM — 2 pieces · 2 articles — Google News 2Nov 2, 12 PM — 1 piece · 1 article — Google News 1Nov 2, 3 PM — 1 piece · 1 video — YouTube 1Nov 2, 6 PM — quietNov 2, 9 PM — quietNov 3, 12 AM — quietNov 3, 3 AM — quietNov 3, 6 AM — quietNov 3, 9 AM — quietNov 3, 12 PM — quietNov 3, 3 PM — quietNov 3, 6 PM — quietNov 3, 9 PM — quietNov 4, 12 AM — quietNov 4, 3 AM — quietNov 4, 6 AM — 1 piece · 1 article — Newswires 1Nov 4, 9 AM — quietNov 4, 12 PM — quietNov 4, 3 PM — quietNov 4, 6 PM — quietNov 4, 9 PM — quietNov 5, 12 AM — quietNov 5, 3 AM — quietNov 5, 6 AM — quietNov 5, 9 AM — quietNov 5, 12 PM — quietNov 5, 3 PM — quietNov 5, 6 PM — quietNov 5, 9 PM — quietNov 6, 12 AM — quietNov 6, 3 AM — quietNov 6, 6 AM — quietNov 6, 9 AM — quietNov 6, 12 PM — quietNov 6, 3 PM — quietNov 6, 6 PM — quietNov 6, 9 PM — quietNov 7, 12 AM — quietNov 7, 3 AM — quietNov 7, 6 AM — 3 pieces · 2 articles · 1 post — Google News 1, Newswires 1, Mastodon 1Nov 7, 9 AM — quietNov 7, 12 PM — quietNov 7, 3 PM — quietNov 7, 6 PM — quietNov 7, 9 PM — quietNov 8, 12 AM — quietNov 8, 3 AM — quietNov 8, 6 AM — quietNov 8, 9 AM — 4 pieces · 1 post · 3 comments — Reddit 4Nov 8, 12 PM — 2 pieces · 1 article · 1 post — Mastodon 1, Newswires 1Nov 8, 3 PM — 1 piece · 1 comment — Reddit 1Nov 8, 6 PM — quietNov 8, 9 PM — quietNov 9, 12 AM — quietNov 9, 3 AM — quietNov 9, 6 AM — quietNov 9, 9 AM — quietNov 9, 12 PM — quietNov 9, 3 PM — quietNov 9, 6 PM — quietNov 9, 9 PM — quietYesterday, 12 AM — quietYesterday, 3 AM — quietYesterday, 6 AM — quietYesterday, 9 AM — quietYesterday, 12 PM — quietYesterday, 3 PM — quietYesterday, 6 PM — quietYesterday, 9 PM — quietToday, 12 AM — quietToday, 3 AM — quiet 1–34
Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9now · 5:43 AM ET
  1. 4

    FT broadcasts short segment on the fridge-hacking story

    The Financial Times aired a short video segment flagging supermarket fridges as hackers' new target, pointing viewers to further FT coverage.

    “Hackers have found a new target: supermarket fridges.”
    — Financial Times
    1. first by The Independent, 8d ago

    • The fix is really not that hard. No over the air firmware updates (use usb/memory stick/etc). And have the WiFi/bluetooth chip have a one way connection to the control chip. So it can get reports, but not communicate or control the master chip. That means no editing of settings, and no “fun” updates. But who really needs to do that over there…

      reality_boyr/technology2d agoview on r/technology ↗
    2 more of the top 3 · 4 posts in this stretch
    • Good point. According to Reddit, the US could magically fix all its problems if every citizen across all 50 states somehow simultaneously organized a revolution because the French did it a few times throughout history.

      Loganp812r/technology2d agoview on r/technology ↗
    • I can see the use case for groceries who need to monitor the fridges to make sure they are operational, but they should either be not accessible from the outside Internet of course, which these were.

      Signal_Flight_7262r/technology2d agoview on r/technology ↗
    all of them →
  2. 2

    Swedish supermarkets report similar refrigeration disruption

    Several supermarkets in Sweden also reported on the same Monday that a cyberattack had disrupted their refrigeration systems, according to Aftonbladet.

    1. first by BelgaShare.be, 8d ago

  3. 3

    Ahold Delhaize's Belgium and Luxembourg fridges hit by new 'IT incident'

    Fridges and freezers at dozens of Ahold Delhaize supermarkets in Belgium and Luxembourg, including Delhaize, Carrefour and Spar outlets, were remotely forced into defrost mode, using the same mechanism as the French attack; technicians were mobilised from 1am to disconnect affected units.

    “We began mobilising technicians at 1 am to get the situation under control.”
    — Moelans
  4. 1

    Reuters explainer surveys how vulnerable connected devices really are

    An explainer piece reviewed past IoT hacking incidents — a 2015 Samsung fridge demonstration, the 2015 Jeep remote-hijack recall, and a Kia vehicle-tracking flaw — to contextualize how hackers could exploit connected appliances and routers.

    “In theory, yes. If a device is connected to the internet, directly or through an app, cloud service or home network, it can potentially be hacked.”
    — Reuters
    1. first by Investing.com News, 9d ago · also Reuters

  5. background

    Ahold Delhaize reports an earlier cybersecurity incident to Dutch police — The retailer reported a cybersecurity incident to Dutch police in October, coinciding with the France attack, though details were limited at the time.

  6. background

    Cyberattack hits hundreds of French supermarkets' refrigeration systems — A cyberattack caused refrigerators and freezers at hundreds of French stores to heat to about 50°C (122°F) overnight, sparking fires and spoiling food.

Also covered reported alongside — the timeline has no entry for these yet

  1. first by WIRED, 3d ago · also The Atlantic

    1 more headline

and 3 smaller pieces

What people are saying 1 voices from 1 site · best of 4 · verbatim