In a recent incident, hundreds of French stores were affected by a cyberattack that targeted their refrigeration systems, causing temperatures to rise to around 50°C and resulting in significant damage to perishable goods. The attack, which occurred on Sunday, October 11, 2026, and Monday, October 12, 2026, affected approximately 700 stores, with some reporting fires related to the incident.
The French Ministry of Finance reported that the attack did not involve data theft or hacking of accounts, but rather interference with physical systems that control devices that preserve food from spoilage. This type of technology is known as "operational technology" (OT) and includes systems and devices that monitor and control physical processes, such as temperature, pressure, and flow rate.
Operational technology differs from traditional information systems, which primarily focus on storing, processing, and transmitting data. OT systems, on the other hand, interact directly with the physical world, making them a critical component of various industries, including food storage, manufacturing, and energy production. The increasing digitalization of these systems has created new vulnerabilities, particularly when they are connected to the internet without adequate security measures.
The French incident highlights the risks associated with outdated OT systems, which may no longer receive security updates or patches. In this case, the affected systems were old and no longer supported by the manufacturer. The incident also underscores the importance of securing OT systems, which are often managed and maintained by external companies, sometimes without the knowledge of the operating institution.
The US Department of Defense is also investigating a series of unexplained malfunctions affecting refrigeration systems at at least six military stores in August 2026. The incidents are being treated as potential cyberattacks, with some cases involving the malfunction of temperature control systems, resulting in food spoilage.
The similarities between the French and US incidents have prompted authorities to collaborate on the investigation, with a focus on identifying potential commonalities and vulnerabilities. The incidents demonstrate that the consequences of OT system breaches can be severe, with significant economic and national security implications.
To mitigate these risks, experts recommend a comprehensive approach to securing OT systems, including inventorying connected devices, identifying vulnerabilities, and implementing robust security measures, such as network segmentation and isolation. By prioritizing the security of these critical systems, organizations can reduce the risk of cyberattacks and protect their operations, as well as the safety of their customers and employees.
Key points
- The increasing digitalization of operational technology systems has created new vulnerabilities, particularly when they are connected to the internet without adequate security measures.
