Remote cyberattacks ruin food supplies across Europe and spark warnings for Australia

Hackers recently used the internet to tamper with store refrigeration units across at least 11 countries, raising temperatures in freezers and causing food to spoil. Major European grocery chains in Belgium, Sweden, Finland, and Ireland suffered disruptions during this wave of attacks, which followed a similar incident affecting French supermarkets weeks earlier. Security experts note that the culprits spent very little money to pull off the digital intrusion.

Vulnerabilities and Suspects

French Foreign Minister Jean-Noël Barrot blamed Iran for orchestrating the digital raids and asked for European sanctions against Tehran. Security investigators point out that the targeted refrigeration systems were easy to breach because operators left them connected directly to the internet with weak passwords or default factory settings. Equipment makers and cybersecurity firms report that thousands of these store units remained exposed worldwide. While no group demanded money or claimed responsibility, researchers mention that Russian-aligned actors have targeted similar infrastructure in the past.

Wider Risks and Local Status

These same small computers also control cooling systems in medical warehouses, data centres, and blood banks, though no patients were harmed during incidents involving blood storage. Artificial intelligence tools have made it even easier for attackers to exploit security holes in the equipment quickly. Australian authorities and security companies warn that local businesses must secure their internet-connected gear, such as lifts and air-conditioners, against similar disruptions. Major grocery operators in Australia state they do not connect store refrigeration to external networks, and no local attacks have been reported so far.

Context

Refrigeration controllers are small computers designed to manage temperatures in commercial cooling units, but connecting them to the internet without proper firewalls leaves them open to remote tampering. This incident highlights a growing global trend where malicious actors target weaker links in commercial networks rather than heavily guarded banking systems. Security agencies frequently issue warnings urging critical infrastructure operators to disconnect sensitive physical machinery from public web access entirely.