Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C
Hackers exploit refrigeration systems in Swedish supermarkets, causing food spoilage.
Hackers have targeted refrigeration systems in Swedish supermarkets, including several ICA and Coop locations, causing freezers to reach temperatures as high as 55°C and leading to significant food spoilage. These incidents follow similar attacks in French supermarkets in October. While the exact entry point and attackers remain unconfirmed for the Swedish incidents, French authorities identified compromised Danfoss and Copeland controllers, warning against exposing management interfaces directly to the internet.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ICA?
Get an email when a new story names ICA, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonHackers exploited internet-exposed industrial control system (ICS) interfaces—specifically Danfoss and Copeland refrigeration controllers—to manipulate freezer temperatures in Swedish and French supermarkets, causing widespread food spoilage. The root problem was that critical operational technology (OT) management interfaces were directly reachable from the public internet without adequate access controls or network isolation. This matters because OT attacks have immediate, tangible physical consequences: financial losses from spoiled inventory, food safety risks to consumers, and potential regulatory liability. The incidents also highlight a systemic gap in securing legacy industrial equipment that was never designed with internet-connected threat models in mind.
What helps against this
How we list vendors- Zero trust network access (ZTNA)
Remote access no longer means exposing VPN appliances to the internet.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Danfoss AK-SM
- malware — Danfoss AK-SC
- malware — Copeland xweb
- malware — Dixell xweb