Fridge hack costing millions and sparking fires stemmed from poor security

Key Points:

• Approximately 700 supermarkets in France experienced a mass hack targeting their refrigeration systems, causing widespread spoilage of perishables and some fires due to malfunctioning refrigerators and freezers.
• The breach exploited internet-connected controllers from Danfoss, Dixell, and Copeland, which had known critical vulnerabilities allowing remote administrative access, including predictable daily passwords and outdated firmware.
• Basic cybersecurity measures such as removing controllers from public internet access, using VPNs, IP allowlists, and timely patching were neglected, enabling the large-scale attack that also affected stores in Spain, Portugal, Poland, Germany, and Belgium.
• Security researchers and agencies had previously warned about these vulnerabilities and the importance of cyber hygiene, but many businesses failed to implement these protections, leading to significant financial and operational damage.
• The attackers remain unidentified, with motives possibly ranging from mass vandalism to nation-state disruption, highlighting the ongoing challenge businesses face balancing cost-saving with necessary cybersecurity investments.