Cyberattacks on French supermarkets: ignored warnings

Recently, a cyberattack was reported that affected nearly 700 supermarkets in France, where refrigeration controllers were manipulated to raise temperatures to 50°C, causing food loss and fire hazards. Security researchers had warned about these vulnerabilities months, and even more than a year, before the attacks occurred, raising serious questions about preparedness and response to cyber threats.

## Why it matters This incident not only jeopardizes food safety but also highlights the importance of keeping security systems on internet-connected devices up to date. The lack of software updates on the compromised refrigeration controllers serves as a reminder of the vulnerability many critical infrastructures face in the digital age.

## What we know France's National Cybersecurity Agency (ANSSI) has confirmed that refrigeration controllers from Danfoss and Copeland were among the most affected. These devices were accessible over the internet, and many had not received security updates, facilitating the attack. Additionally, the lack of firmware maintenance on these systems contributed to their vulnerability.

## What remains unclear The identity of the attackers and the full extent of the damage caused is still unconfirmed. Furthermore, it is unclear whether the companies responsible for the devices will take adequate measures to prevent future attacks and if changes in regulation will be implemented to better protect critical infrastructures.