When defrost becomes sabotage: 3 OT lessons from France’s supermarket attack

Summary

A cyberattack targeted French supermarkets, remotely activating defrost cycles in hundreds of stores and causing significant spoilage of goods. The attack, which hit Intermarché, Netto, and Coopérative U stores, has led to losses in the tens of millions of euros. Investigators are puzzled by the lack of a ransom demand, suggesting the motive might be sabotage rather than financial gain.

IFF Assessment

FOE

The article details a successful sabotage attack that caused significant financial losses and disrupted operations for multiple businesses, representing a negative development for defenders.

Defender Context

This incident highlights the growing threat of operational technology (OT) sabotage targeting critical infrastructure and supply chains. Defenders must consider the security posture of third-party vendors and contractors who often have remote access to sensitive industrial control systems. Strengthening access controls and monitoring for unusual activity within OT environments are crucial defenses against such attacks.

Read Full Story →