Hackers broke into the computer controlling a freezer at an Estonian supermarket chain and set its temperature to 50 degrees Celsius; the maker of the affected technology says other Estonian clients have also been attacked.
Jann Mutso, CEO of Kitman Coldtech, which makes the affected refrigeration control technology, said the victim was a large chain store and that the attack happened this morning. He declined to tell ERR which store's cooling system had been hit.
"One of our clients was attacked," Mutso said, describing the victim as a "large chain store". "More has happened. I don't know exactly yet, but other clients in Estonia have also been attacked, not only ours. This is very fresh, it happened this morning."
The attackers gained access to the control computer of an older type of Danfoss refrigeration system and raised its temperature to 50 degrees above zero, matching the method seen in incidents in France and the Netherlands last month. "The signature is the same, but I can't comment further yet," Mutso said.
Mutso said it is normal in large food stores for refrigeration systems to be digital and connected to the network, but the attack had sought specific security holes. "All the store chains have started fighting this and have updated their controllers, but there are also places where the controllers are old and not updated, and it is those which are being targeted now."
Mutso said the incident was responded to within 10 minutes of being reported, meaning no damage was caused. However, disrupting digital systems can directly affect food safety and cause significant damage, Mutso added. According to information on Kitman Coldtech's website, its clients include four major Estonian supermarket chains: Selver, Rimi, Coop and Lidl.
Analysis
Why This Matters
- The attack crossed from data theft to physical infrastructure, turning a supermarket's own refrigeration system into a hazard; without the swift response, the sudden temperature spike could have spoiled food.
- The same attack signature reported in Estonia, France and the Netherlands points to a coordinated pattern that could target other retailers using older networked refrigeration controllers.
- Supermarket refrigeration failures can disrupt food supply and raise safety concerns for consumers, even when the response is quick.
Background
Supermarket refrigeration systems in large food stores are commonly digital and networked, which makes them accessible remotely. The Estonian attack follows similar incidents in France and the Netherlands last month. Kitman Coldtech, which makes the affected technology, said its clients include four major Estonian chains: Selver, Rimi, Coop and Lidl.
What to Watch
- Whether other Estonian chains confirm attacks; Kitman Coldtech's CEO said more clients had been hit but details were not yet known.
- Whether investigators identify the attackers and establish a connection to the France and Netherlands incidents.
- Whether retailers accelerate replacing old, unpatched refrigeration controllers, which the CEO said are the ones being targeted.
Checked
12 claims in this story checked against 1 source: 12 supported.
Show each claim
- SupportedHackers set a freezer at an Estonian supermarket chain to 50°C in a cyber attack.ERR News: “An Estonian supermarket chain has been hit by a cyber attack which saw attackers access a computer controlling refrigeration, and setting a freezer to 50 degrees above zero.”
- SupportedThe refrigeration technology maker says other Estonian clients have also been attacked.ERR News: “Jann Mutso, CEO of Kitman Coldtech, which makes the affected tech, said one of its clients was attacked, adding that other Estonian clients have also been hit.”
- SupportedThe attack method matches similar incidents in France and the Netherlands last month.ERR News: “The methods match similar attacks seen in France and the Netherlands last month.”
- SupportedAttackers accessed the control computer of an older Danfoss refrigeration system and raised its temperature to 50 degrees above zero.ERR News: “The attackers gained access to the control computer of an older type of Danfoss refrigeration system and raised its temperature to 50 degrees above zero”
- SupportedMutso said, “One of our clients was attacked,” and described the victim as a “large chain store”.ERR News: ““One of our clients was attacked,” Mutso said, describing the victim as a “large chain store”.”
- SupportedMutso said, “More has happened. I don't know exactly yet, but other clients in Estonia have also been attacked, not only ours. This is very fresh, it happened this morning.”ERR News: ““More has happened. I don't know exactly yet, but other clients in Estonia have also been attacked, not only ours. This is very fresh, it happened this morning.””
- SupportedMutso said, “The signature is the same, but I can't comment further yet.”ERR News: ““The signature is the same, but I can't comment further yet,” Mutso said.”
- SupportedMutso said, “All the store chains have started fighting this and have updated their controllers, but there are also places where the controllers are old and not updated, and it is those which are being targeted now.”ERR News: ““All the store chains have started fighting this and have updated their controllers, but there are also places where the controllers are old and not updated, and it is those which are being targeted now,” he continued.”
- SupportedJann Mutso is CEO of Kitman Coldtech, which makes the affected technology.ERR News: “Jann Mutso, CEO of Kitman Coldtech, which makes the affected tech”
- SupportedMutso declined to identify which store's cooling system was hit to ERR.ERR News: “Mutso declined to tell ERR which store's cooling system had been the victim”
- SupportedThe incident was responded to within 10 minutes of being reported, and no damage was caused.ERR News: “He said he the current incident was responded to within 10 minutes of being reported, meaning no damage was caused.”
- SupportedKitman Coldtech's website lists Selver, Rimi, Coop and Lidl among its clients, describing them as four major Estonian supermarket chains.ERR News: “According to information on Kitman Coldtech's website, its clients include four major supermarket chains in Estonia: Selver, Rimi, Coop and Lidl.”
