An Unconventional Cyberattack

An unprecedented cyberattack forced French retailers to discard large volumes of food. Hackers raised refrigeration temperatures to 50°C at about 150 Intermarché supermarkets in France. This incident has retailers globally questioning how secure their own operational systems really are. The attack hit overnight on a weekend when stores sat completely empty. Criminals struck when nobody was watching the temperature readings actively. Danfoss supplies the refrigeration controllers and confirmed the affected units ran outdated firmware. Some units were simply too old to receive modern security updates at all. France’s cyber agency had previously warned against exposing management interfaces directly to the internet.

Evaluating Vulnerabilities In The UAE

Cybersecurity experts confirmed that the same class of equipment runs across UAE hypermarkets. Cold stores and hospitals also utilize these vulnerable connected systems locally. Mortada Ayad serves as Vice President of Sales for Delinea in the Middle East. He called the strike highly unconventional, noting few expected an attack on food supplies. He explained that refrigeration was likely treated as a low-priority cyber target historically. "Nobody can predict a zero-day vulnerability, but regular updates close known weaknesses," he stated. Exposed management interfaces make matters significantly worse for retail operations. Criminals anywhere can find and exploit anything reachable from the public internet.

Securing Operational Technology

Subhajeet Singha works as a Senior TRU Researcher at Acronis. Connected refrigeration controllers carry the most risk when three specific conditions meet. These include old software, direct internet exposure, and loosely controlled remote maintenance access. Ashok Chandrasekharan serves as Chief Operating Officer at ParamountAssure. He points to a massive ownership gap regarding these connected devices. These systems usually sit with facilities teams rather than dedicated IT security teams. Consequently, they often fall completely outside the company's formal cyber protection programme. Equipment can run for 15 to 20 years, long after vendor support ends entirely.

Building A Strong Defense

"You can’t patch your way out of that," Chandrasekharan explained. Singha recommends retailers create a comprehensive inventory of all controllers and building systems. Remove direct internet access and route maintenance through a secure, authenticated gateway immediately. Ayad added that external contractors need named accounts limited to specific time windows. Protect your business infrastructure from emerging global digital threats. Find more essential technology and cybersecurity analysis at The WAU.

Share This Post