French supermarket fridge hack traced to basic security lapses, says ANSSI chief
The ANSSI director warned that elementary security flaws, such as weak passwords and direct internet exposure, enabled the October fridge cyber-attack on French supermarkets.
During a Senate hearing, ANSSI chief Vincent Strubel explained that the October cyber-attack on hundreds of supermarket fridges was possible because of basic security oversights, including direct internet exposure and weak administrative passwords. He emphasized that the agency's guidance, first published in 2014, explicitly advises against such exposure, yet compliance remains inconsistent. The intrusion allowed attackers to raise temperatures remotely, compelling retailers to throw away significant food stocks.
Strubel pointed out that comparable refrigeration systems are used in many other fields, notably in health-care settings from research labs to pharmacies storing vaccines. He said ANSSI has worked intensively with health-sector partners to secure those critical devices. However, the agency lacks authority to enforce security measures on private supermarket operators, leaving compliance to individual actors.
Why it matters
Basic cybersecurity gaps can disrupt food supply chains and endanger health-critical storage, affecting consumers and public safety.
In this story
