Symbolic imageFreezer hacks reach Germany, UK and Greece after wave across Europe
Hackers remotely overheated freezers at supermarkets and food suppliers in over ten European countries from Monday. Germany, the UK and Greece have now reported cases.
Retailers in Belgium, Estonia, Finland, Ireland, Luxembourg, the Netherlands and Sweden reported overheating units on Monday, 2 November, with some reaching 50C, according to the Guardian. Italy and Portugal followed, FAZ reports, and TASS puts preliminary damage in the tens of millions of euros. EU Agriculture Commissioner Christophe Hansen called the attacks a deliberate attempt to disrupt the bloc's food supply, while saying food security is not at risk. The wave follows the French attacks of October, which the Guardian says exploited legacy equipment online with default passwords.
Germany: Rewe, CAP and Edeka stores hit
A Rewe spokeswoman said an independently run store in Raesfeld lost cooling in connection with an attack on system supplier Danfoss; food was discarded and cooling has run again since Monday afternoon. WDR reported a manipulated CAP store in Wuppertal, and BR an Edeka branch in Reisbach that binned thawed goods.
UK: meat suppliers affected, culprit unknown
The NCSC's Paul Chichester said national impact is minimal. The British Association of Independent Meat Suppliers said some of its more than 300 members became "collateral", with no meat lost because the affected units were empty. NCSC chief Richard Horne called it the "foothills" of a larger threat and said of the culprit: "It might be states. It might be criminals."
Greece: Athens butcher loses control of units
Butcher Giorgos Boumbas in Kifisia, Athens, told Sky TV, per Politika, that his units were set to 50C and that he regained control after about three hours. Politika, citing Bild, adds that Danfoss said most affected systems no longer receive security updates.
Other opinions
The Guardian cites experts saying decoy fridge controls attacked online showed traits similar to Russia-linked operations. TASS reports the wave without mentioning any attribution.