Device Authority has warned that cyberattacks targeting supermarket refrigeration systems highlight security weaknesses across connected industrial equipment.
An attack affecting around 700 supermarkets in France involved hackers accessing refrigeration controllers and changing freezer settings, causing temperatures to rise and triggering defrost cycles. The incident resulted in spoiled stock, equipment damage and disruption to store operations.
Device Authority said the attack exposed weaknesses including internet-accessible controllers, default passwords, outdated software and poorly secured remote access used by contractors.
The company recommends removing industrial controllers from direct internet access, introducing secure remote access systems and using unique cryptographic identities to authenticate devices and users. It also advocates monitoring equipment for unusual activity, including unexpected temperature changes and extended defrost cycles.
Device Authority said the risks extend beyond supermarkets to connected systems used in water treatment, energy networks, healthcare, smart buildings and industrial production.
The company also pointed to the EU Cyber Resilience Act, which introduces cybersecurity requirements for connected products from December 2027.
Tern plc (LON:TERN) backs exciting, high growth IoT innovators in Europe. They provide support and create a genuinely collaborative environment for talented, well-motivated teams.
