Israel orders retail chains to secure refrigeration controllers after unattributed European incidents
The National Cyber Directorate’s 2 November warning follows temperature failures at Swedish supermarkets. No attacker has been named by anyone, in Israel or in Europe.
The Israel National Cyber Directorate issued a warning on 2 November to retail chains, food companies and logistics centres following a wave of attacks in Europe on internet-connected refrigeration controllers. By the Directorate’s account, attackers exploited vulnerabilities in internet-connected control systems, remotely changed temperature settings and activated defrosting cycles. Chains were told to inspect refrigeration and control systems — specifically those permitting remote access by technicians and service providers — and to report findings and mitigations back to the Directorate. Ynet carried the directive wording: chains must “immediately protect themselves against takeover of cooling systems.” The trigger was European. Two Swedish chains said freezer and refrigerator temperatures rose early on 2 November, forcing disposal of spoiled stock, roughly three weeks after a similar incident in France attributed to hackers, according to the Jerusalem Post’s 2 November account.
Assessment: This is a precautionary advisory about incidents elsewhere, not a report of an attack on Israel, and the distinction is already eroding in circulation. Two details need holding at arm’s length: the claim of “equipment damage and even fires” appears in the Israeli write-ups without a named Swedish or French authority behind it, and no European authority has attributed the incidents to anyone — state or criminal. The reflexive-attribution pattern is visible in both directions: replies under the Israeli correspondent’s post pushing Unit 8200 as the culprit are as unsourced as anything they are answering. Separately, and worth recording: no credible new MENA or Gulf commercial-spyware reporting surfaced this week.