EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
EU grocers lose millions due to unpatched OT firmware in cooling systems.
Summary
Hundreds of European grocery stores have suffered significant financial losses due to the exploitation of unpatched firmware in their refrigeration systems. The vulnerabilities were leveraged by third-party managed service providers, highlighting a critical gap in operational technology (OT) security within the retail sector. This incident underscores the need for robust patch management and security oversight for all connected devices, even those seemingly outside traditional IT perimeters.
The lesson from this incident
Full lessonEuropean grocery chains suffered major financial losses after attackers exploited unpatched firmware vulnerabilities in internet-connected refrigeration systems — operational technology (OT) assets that are frequently overlooked in traditional IT security programs. The involvement of third-party managed service providers compounded the risk, as patch accountability fell into a gap between the retailers and their vendors. This incident illustrates that every networked device, regardless of its physical function, represents an attack surface that must be actively managed. Ignoring OT/IoT firmware patching is no longer acceptable in an era where critical infrastructure and retail operations are deeply interconnected.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.