Cyberattacks target supermarket refrigeration as AI lowers barriers and threatens food supplies

Cyberattacks on connected refrigeration systems are exposing risks to food supplies as AI makes it easier to find and exploit security weaknesses, cyber law expert Star Kashman warned.

In a November 3 interview with LiveNOW from FOX, Kashman said attacks were extending beyond stolen information to physical infrastructure. Older equipment connected to the internet could expose essential services to disruption.

The broadcast cited Associated Press reporting that supermarkets in Sweden, Belgium, Luxembourg, Ireland and Estonia experienced freezer and refrigerator problems on Monday apparently caused by cyberattacks, forcing some to discard spoiled food. The incidents followed attackers remotely taking control of refrigeration systems at hundreds of supermarkets and independent stores across France the previous month.

Kashman said reliance on the same outdated or poorly secured systems could spread disruption across multiple regions. Equipment that people may not realize is accessible online can become an entry point for attacks, potentially affecting food availability and prices.

Such attacks do not necessarily require state backing or extensive technical training, she said. AI can simplify vulnerability discovery and exploitation and make attacks easier to automate. She suggested that older technology introduced for convenience and Internet of Things integration may have been connected without adequate protection.

However, the involvement of several countries does not establish how sophisticated the attack was, Kashman cautioned. With limited confirmed investigative information, possible explanations included cooperation among hacking groups, shared systems with a common vulnerability or basic weaknesses such as unchanged administrator passwords.

Identifying those responsible also presents procedural and technical difficulties, she said. European privacy protections can complicate access to records, while VPNs, proxies and compromised devices can obscure an attacker's location. Even when investigators obtain information such as IP addresses, interpreting those clues can be difficult and cases may remain unresolved.

Kashman said defensive preparations were falling behind AI's ability to simplify and accelerate attacks. As finding and exploiting vulnerabilities becomes easier, the risk extends to businesses operating physical equipment as well as organizations holding sensitive information.

She also warned that similar disruptions could affect the United States. Shared systems and vulnerabilities can allow knowledge gained from one attack to inform subsequent attempts, she said. The refrigeration incidents illustrate how connected equipment can affect access to food and water, and she urged governments to provide resources that help citizens and small businesses prepare.