Key facts
- The hack affected refrigeration controllers in France, Spain, Portugal, Poland, Germany, and Belgium.
- Researchers from Pen Test Partners and Claroty identified the vulnerabilities.
- The company acknowledged the vulnerability in a discontinued, end-of-life generation of controllers.
A widespread hack targeting refrigeration controllers across several European countries, including France, Spain, Portugal, Poland, Germany, and Belgium, has resulted in millions of euros in damages and sparked fires. Security researchers attribute the incident to a failure to implement basic cybersecurity measures, such as updating firmware, using VPNs, and restricting IP access for remote logins. These protections are considered standard but were reportedly not followed by the affected stores. Researchers from Pen Test Partners stated that improved cyber hygiene would have prevented the access. The US Cybersecurity and Infrastructure Security Agency had previously issued warnings about similar threats. A company representative acknowledged a vulnerability in a discontinued generation of controllers and stated that efforts are underway to prevent future incidents. The motive behind the attack remains unclear, with possibilities ranging from mass vandalism to a coordinated effort for continent-wide disruption.