Blog

Hackers have demonstrated that you do not need to destroy a farm or stop a delivery truck to destroy food. There was recently an overnight attack on supermarket refrigeration systems in France that forced temperatures as high as 50 C or 122 F across 150 stores. Food had to be discarded after six hours in high temperatures. Every aspect of life that operates online is fair game in cyberwarfare.

Updated Reuters reporting says Carrefour identified 80 affected supermarkets, while Monoprix said roughly 5% of its approximately 490 stores were hit. Intermarché’s chief executive estimated nationwide losses in the tens of millions of euros in a single day, although a verified industry-wide total was not yet available. Danfoss, the refrigeration supplier, said affected equipment was running outdated firmware and that customers had previously been advised to update supported systems or replace older ones.

We have developed an absurd assumption that connecting something automatically improves it. Remote access is convenient, so we count the convenience as a benefit while treating the ongoing obligation to secure it as overhead. Yet monitoring a refrigerator and allowing someone elsewhere to change its operation are different powers.

This obsession with connecting everything deserves a harder examination. Remote monitoring can save money and identify equipment failures, but remote control also creates something an attacker can exploit. The issue here is network access to essential controls. Once someone unauthorized can change how the machinery operates, a computer intrusion can produce physical destruction.

People still imagine war requires an army crossing a border. Why invade when you can interfere with the systems that keep the population supplied? If an attacker gained access to refrigeration controls shared across a large chain, food could be destroyed in hundreds of locations before the morning shift arrived. For scale, 1,000 stores losing 10 metric tons each would mean 10,000 tons gone. Extend the disruption into refrigerated warehouses and you threaten supplies destined for many more stores. The food has already been produced and paid for. Restoring a computer does not bring it back, and replacement shipments cannot appear simply because a politician promises that everything is under control. The economic consequences would spread through lost sales, interrupted wages, replacement costs, and potentially higher prices, while frightened customers rushed to buy what remained.

Being on the electrical grid is not the same as being accessible over the internet. This attack is disturbing precisely because it did not require a blackout. Dependence on power creates one vulnerability; insecure network controls create another. Add dependence on digital ordering, communications, and deliveries, and a business can discover that several supposedly separate functions rely on the same fragile chain of services. The question should be how much can continue working when one link fails, rather than how many functions can be managed remotely.

Keep reading