ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe
ENISA warns of cyberattacks on European refrigeration systems, impacting supermarkets and food supplies.
Run ENISA?
Get an email when a reviewed story names ENISA, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
ENISA, the European Commission, Europol, and national cybersecurity bodies have issued a joint warning about cyberattacks targeting commercial refrigeration systems across Europe. The attacks, which began in October and saw a new wave in early November, have led to significant food spoilage in French supermarkets by remotely altering temperature controls. The targeted systems, often older or unsupported industrial control equipment from vendors like Danfoss, highlight a broader vulnerability in operational technology (OT) security.
The lesson from this incident
Full lessonAttackers remotely altered temperature controls in commercial refrigeration systems across Europe, causing significant food spoilage in French supermarkets by exploiting older, unsupported industrial control equipment from vendors like Danfoss. The root cause lies in unmanaged vulnerabilities in operational technology (OT) environments, where legacy systems frequently lack patches, vendor support, or basic network isolation. This incident illustrates how OT assets — often overlooked in traditional IT security programs — can become direct vectors for real-world physical and economic harm. The convergence of IT and OT networks, without proper segmentation or compensating controls, dramatically expands the attack surface for critical infrastructure.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
- malware — Danfoss refrigeration controllers