科技 · Refrigeration hackHackers spoil food at hundreds of French supermarkets as cyber warning stays active文字 2026年10月14日 下午1:28 [UTC]觀看逐字稿0:07Hackers forced hundreds of French supermarkets to throw away fresh and frozen food.0:11Retailers faced spoiled stock, damaged equipment, and reported fires, while France's0:16cybersecurity agency warns attack campaigns could still be underway.0:20Can stores keep food safely chilled while shutting outsiders out of their0:23refrigeration controls?0:24Staff emptied refrigerated and frozen sections after attackers remotely interfered0:29with the equipment keeping products cold.0:31Some fresh and frozen aisles remained closed.0:34One store director described losing all the stores fresh and frozen produce.0:38The disruption struck overnight while stores were unattended.0:41Attackers reportedly changed temperature settings or activated defrost systems,0:45allowing equipment to warm for hours.0:48The clearest timing places the attack across the night of October 11 into October0:5212, 2026.0:53Sunday night and Monday descriptions can refer to that same overnight disruption.0:58Retailers confirm the damage on Monday.1:00The timing doesn't show two separate waves of attacks, and nobody has given precise1:04start and finish times.1:06The heating was prolonged.1:07Some descriptions put it at six hours or more.1:10while others describe several hours overnight.1:12Those are estimates of what happened to some equipment, rather than a single1:15measured duration across every affected store.1:18Some refrigeration settings or temperatures reportedly reached up to 50 degrees1:22Celsius, equivalent to 122 degrees Fahrenheit.1:25Other descriptions put them above 100 Fahrenheit.1:28The figures mix settings and appliance readings, so they don't show every cabinet1:32reached the same temperature.1:33Les Musquetaires reported 300 affected Intermarche and Netto stores.1:38That gives a concrete measure of the damage within one retail group.1:42Other major chains were hit too, and their figures explain why the impact extends1:46well beyond that group.1:47The retailer breakdown also identifies 80 Carfour supermarkets, 80 U stores and1:52around 30 Monoprick stores.1:54Several E-Leclerc stores were affected too.1:56With an approximate Monoprix figure and no Leclerc count, that breakdown can't2:01produce an exact national total.2:03The national estimates disagree.2:04They range from at least 350 stores to about 500 or about 700.2:09Their publication times don't explain the differences, and the figures shouldn't be2:13added together or treated as proof that new attacks kept increasing the toll.2:17The higher estimate puts about 700 of France's 10,000 supermarkets in the affected2:21group, roughly 7%.2:23But nobody has reconciled the store lists or explained the counting methods behind2:27the different national estimates.2:29French authorities are also coordinating with European counterparts over similar2:33incidents.2:34The reported reach includes five other countries, although the damage in each2:38country hasn't been counted, and investigators haven't connected every incident2:42through one common intrusion route.2:43Stores in Spain, Portugal, Poland, Germany, and Belgium were also reportedly2:48affected.2:49Experts warned that similarly connected equipment could expose retailers elsewhere,2:53including Canada and Australia, to the same kind of physical disruption.2:56A supermarket in a Paris suburb estimated its spoiled product losses at 55,0003:01Euros.3:02Intermarché's chief executive expected costs in the millions of Euros and other3:06retailer estimates reached tens of millions.3:09Those estimates cover different scopes and aren't a final bill.3:12Dollar-denominated estimates also run from millions to tens of millions, but the3:16currency isn't consistently specified.3:18They can't simply be combined with the Euro figures.3:21Retailers also face equipment damage and interrupted sales beyond the cost of3:25replacing food.3:26The Paris Prosecutor's Office included food losses and fires in its account of the3:30attack.3:31Fires were reported at some stores, but the ignition mechanism and full damage3:35haven't been explained.3:36Fresh and frozen sections were still closed at some locations during the reporting.3:40France's cybersecurity agency urged operators to remove internet exposure from3:44affected units.3:45Its warning targets the remote management connection.3:48Retailers still need cooling to protect food, and at least one store director said3:53the store had disabled remote operation of its cold units.3:56The agency's CERT FR alert was first issued October 12th and revised October 13th.4:01It described numerous compromises of remote refrigeration controllers.4:05The revision widened the named equipment beyond Dan Foss to include systems from4:08Copeland and Dixel.4:10The warning names Dan Foss AKSM and AKSC, Copeland XWeb, and Dixel Xweb4:15controller families.4:16Dan Foss says most affected units came from an old product line without security4:21updates or were running outdated firmware, the software embedded in the equipment.4:25Dan Foss also says newer models were unaffected, and it's working with affected4:30customers.4:31Its explanation points to aging connected controls that remained in service after4:35security support ended.4:36Investigators still haven't identified the precise flaw or initial access method4:40used in the attacks.4:41University of Queensland professor Ryan Coe says exposed remote management systems4:45give attackers a route to find and manipulate refrigeration controls.4:49Cybersecurity expert Marta Rybaksinska at Wygriki also points to internet accessible4:54administration, years-old firmware, and missing basic security measures.4:57KO recommends checking online exposure, investing in security, and encouraging5:02prompt reporting.5:03He also warns that AI can accelerate vulnerability discovery and exploit5:07development, potentially compressing hours or days of work into minutes or seconds.5:11That's his general assessment of the technology.5:13UNSW professor Richard Buckland suggests a compromise central provider might explain5:18why multiple retailers were hit.5:20Investigators haven't confirmed that hypothesis.5:22He warns about a single point of failure and recommends independent alarms and human5:26oversight to catch dangerous changes.5:28The Paris Public Prosecutor's Office opened a cybercrime investigation alongside the5:33National Cybersecurity Agency's work.5:35By October 14th, no group had publicly claimed responsibility.5:39No data theft or ransom demand had been reported.5:42Investigators haven't announced the attacker's identity or motive.5:45The EU Cyber Resilience Act sets a broader direction for secure design, updating,5:49and maintenance of connected products.5:51Its reporting obligations began September 11th, 2026.5:55The main obligations are scheduled for December 11th, 2027, though these5:59controllers' precise legal classification hasn't been settled.6:02France's separate NIS2 cybersecurity legislation was still pending in early October.6:08The Senate passed the bill in March 2025, and an assembly committee approved it that6:12September.6:13The assembly floor stage was postponed October 6, 2026.6:17Retailers have begun closing exposed remote access while trying to restore food6:21storage and sales.6:22The agency warns campaigns could still be underway.6:25Disconnecting a remote connection can reduce exposure, but retailers haven't6:29demonstrated that attackers have been excluded everywhere.6:32France's finance minister called the attack a wake-up call.6:35Stores now have to protect two things together, the temperature keeping food safe6:38and the controls deciding that temperature.6:40There's still no common reopening date for affected fresh and frozen aisles.閱讀文章事件時間軸HeyDex短片 ↗誰報導了什麼多家媒體報導的要點✓Food spoiled or discarded已獨立證實 · 9 家媒體✓Number of supermarkets affected已獨立證實 · 7 家媒體✓Hackers accessed and altered refrigeration controls已獨立證實 · 7 家媒體✓Temperatures reached in affected units已獨立證實 · 7 家媒體✓Fires linked to the attack已獨立證實 · 7 家媒體Estimated total financial losses3 家媒體Authorities opened an investigation2 家媒體Outdated refrigeration software and firmware2 家媒體Internet exposure of refrigeration systems2 家媒體No group claimed responsibility2 家媒體Operational technology risks and security practices2 家媒體僅一家媒體報導的要點13僅FRANCE 24 English報導Les Mousquetaires stores affected10月12日 下午9:27 UTCEstimated losses at an individual store or overall10月12日 下午9:27 UTCStore disabled remote operation of cold units10月12日 下午9:27 UTCFrench cybersecurity agency issued guidance10月13日 下午9:05 UTCRetailers named among those affected10月12日 下午9:27 UTCWhether attackers demanded a ransom10月13日 下午9:05 UTC僅ABC News (Australia)報導Damage estimated in the millions10月13日 下午1:30 UTCPossible compromise of a shared central provider10月13日 上午3:15 UTCAI and the speed of developing cyber exploits10月13日 下午1:30 UTC僅ABC News報導Refrigeration units switched to defrost mode10月13日 上午11:07 UTC僅Bloomberg Television報導French students protested school conditions10月13日 上午10:48 UTC僅CTV News報導Supermarkets affected in other European countries10月13日 下午5:45 UTC僅CBS News報導France coordinated with other European countries10月13日 下午6:43 UTC每一行都是我們從該媒體報導中記錄的說法。比較截至 2026年10月14日 下午12:05 [UTC]。
