#Cybersecurity #Denmark #Copenhagen #Secomea #Refrigeration

Cyberattacks on European Supermarkets: A Wake-Up Call for Cybersecurity

The recent wave of cyberattacks targeting supermarket chains across Europe has amplified concerns surrounding the security of operational technology (OT) systems. Notably, these attacks have focused on refrigeration systems, highlighting the need for secure remote access to critical technology that ensures food safety.

In the weeks following a significant breach leading to the manipulation of cooling systems in numerous French stores, newly reported incidents in Sweden, Belgium, and Luxembourg underscore the urgency of the situation. These attacks have revealed how vulnerable supermarket technology can be, especially as operational systems become increasingly integrated with external networks and service providers.

Unlike traditional cyberattacks that primarily aim to steal data or disrupt IT services, attacks on OT can result in immediate physical consequences. Failing refrigeration systems can lead to spoilage of perishable goods, operational interruptions, and severe financial losses, posing significant food safety risks. Michael Ferdinandsen, CEO of the Danish cybersecurity firm Secomea, emphasizes the evolving nature of cybersecurity, asserting, "The stakes have changed; cybersecurity now includes safeguarding physical systems, not just protecting data."

The Necessity of Remote Access Control

For retailers, the question is no longer whether they need remote connectivity; it's about how to manage access to their systems effectively. Today's refrigeration systems require remote access for regular monitoring, diagnostics, and maintenance. Service providers utilize this access to ensure that equipment operates optimally, minimizing downtime and preventing failures. However, this connectivity inadvertently opens doors for potential cybercriminals, particularly when operational systems are inadequately shielded from direct internet exposure.

In complex retail operations, which involve multiple stores and diverse service providers, the challenge escalates. Each provider may have different access methods, complicating the task for IT and security teams to maintain consistent oversight of who is permitted to connect to critical systems. "Many companies have fortified their IT environments but often overlook the unique challenges posed by operational equipment," notes Ferdinandsen. "Old systems may not have been built with today’s connectivity and cybersecurity demands in mind, leading to increased risks if traditional access methods are deployed."

Securing Access Without Halting Operations

Securing refrigeration systems doesn’t necessitate sacrificing remote connectivity. Retailers require solutions that allow essential maintenance while maintaining strict control and traceability of access to their operational equipment. Secomea’s approach involves establishing a secure remote access framework designed specifically for OT networks, allowing control over connections at the equipment level rather than granting general access to entire operational networks.

With Secomea’s native OT architecture, secure connections to operational equipment are made possible through peripheral gateways located near critical assets. The system enables centralized access management, granular permissions, and audit logs to help companies govern who can connect, what equipment they can access, and when.

An example already in operation is AK-Centralen in Denmark, which utilizes Secomea technology to monitor cooling systems remotely across more than 1,500 supermarkets. This secure connectivity enables the company to maintain critical monitoring and maintenance operations without requiring direct access to supermarket internal networks.

Operational Resilience Relies on Visibility and Control

The recent attacks raise questions that extend beyond refrigeration systems in supermarkets. From energy management to production machinery and logistics infrastructure, businesses increasingly rely on connected operational equipment maintained by external specialists. As these environments become more interlinked, there’s a pressing need for standardized methods to manage external access, restrict permissions to necessary equipment, and maintain visibility over remote activities.

Secure remote access is a critical component of this protective strategy, alongside vulnerability management, network segmentation, system updates, and continuous monitoring. Ferdinandsen concludes, "Companies shouldn’t have to choose between ensuring business continuity and maintaining security. The goal is to enable remote assistance essential for modern operations while providing IT and security teams the governance and controls they need—especially when these systems directly influence physical operations."

While inquiries continue regarding the specifics of the latest alleged attacks, these incidents serve as a powerful reminder that cybersecurity gaps in operational environments can quickly escalate into business continuity troubles.

About Secomea

Secomea is a Danish firm specializing in industrial cybersecurity, focusing on secure remote access solutions for operational technologies. Designed specifically for industrial environments, Secomea’s solutions help companies connect securely to critical equipment while providing central governance, granular access control, and visibility over remote access. By merging operational connectivity with business security requirements, Secomea empowers organizations to bolster their operational resilience, mitigate cyber risks, and manage third-party access effectively.