Cybercriminals Target Building Automation Systems, Causing Food Spoilage and Physical Damage

Late Sunday night an unknown cyber actor breached thousands of remote-controlled refrigeration units in hundreds of French supermarkets, raising temperatures, spoiling inventory and igniting fires. This follows earlier incidents, including an August ransomware strike on a Canadian hospital’s building-management system that disabled door access, HVAC monitoring and staff badge issuance, and a 2023 attack on Las Vegas casinos that disabled slot machines, ATMs and electronic room keys.

Security analysts note that building automation systems, which manage HVAC, lighting, access controls and safety equipment, are increasingly targeted because many use insecure protocols and lack robust security controls. A ServiceNow Armis Labs report found that 73 % of organizations with BAS have experienced ransomware attacks, and 91 % use vulnerable communication methods. The emergence of AI tools enables attackers to understand and exploit obscure operating systems without deep OT expertise, expanding the threat landscape.

Researchers also highlight that fewer than 10 % of OT networks worldwide have adequate monitoring, leaving many incidents to be discovered only after operational anomalies appear. As IT environments become better defended, experts predict that internet-connected OT will become the next primary attack vector.