The cyber threat landscape now extends far beyond computers and mobile phones. From supermarket refrigeration systems to smart televisions, security cameras, air conditioners and other connected household devices, cyberattacks increasingly have the potential to disrupt everyday life and cause real-world damage.
Recent incidents across Europe, in which hackers reportedly interfered with refrigeration control systems, resulting in spoiled food and financial losses, have underscored the risks associated with the growing number of devices connected to the internet.
Although no comparable incidents have been reported in Cyprus to date, local retailers use software-based systems to monitor and manage refrigeration equipment, making cybersecurity an increasingly important issue for the sector.
At the same time, the threat is not limited to businesses. As more household devices gain internet connectivity and remote-control capabilities, cybersecurity is becoming a concern for ordinary consumers as well.
Digital resilience is now regarded as a priority at every level, from households and businesses to governments. Protection involves not only preventing attacks, but also detecting, responding to and limiting their impact to ensure the continued operation of critical systems and services.
No reported incidents in Cyprus
According to information obtained by Politis from relevant authorities, no complaints have been filed in Cyprus regarding cyberattacks against commercial refrigeration systems.
A similar assessment was provided by Marios Antoniou, secretary-general of the Cyprus Retail Trade Association, during an interview on Politis Radio 107.6 & 97.6.
Antoniou said supermarket chains in Cyprus use software systems to manage cold rooms and freezers, although the level of technological sophistication varies from one retailer to another.
Larger chains generally operate more advanced infrastructure, while smaller businesses may rely on simpler systems.
He warned that the incidents reported in Europe demonstrate how cyberattacks can affect not only information technology systems but also day-to-day operations and food safety.
"We all need to reassess the cybersecurity systems we have in our businesses," he said.
Antoniou urged companies to view cybersecurity as an investment rather than an expense, noting that the cost of a cyberattack could far exceed the cost of prevention.
How these systems become vulnerable
Cybersecurity specialist Dinos Pastos explained that remote-management capabilities can create potential entry points for malicious actors if not properly secured.
Electronic controllers and sensors used to monitor and regulate equipment can often be accessed remotely. If attackers gain unauthorised access to these systems, they may be able to alter operating settings or disrupt normal functioning.
Pastos stressed that security depends heavily on:
- The quality of the equipment.
- Regular software updates.
- Correct system configuration by qualified personnel.
He noted that equipment considered secure today may become vulnerable in the future if new security flaws are discovered.
He also cautioned that many users are unaware of all the remote-access functions built into their devices, making it more difficult to apply appropriate protections.
The issue extends beyond commercial refrigeration. Similar technologies are used in automated systems throughout supply chains, including storage facilities, warehouses and transport operations.
Widespread attacks across Europe
The attacks on refrigeration systems gained significant attention on 12 October, when approximately 700 supermarkets in France were reportedly affected by interference with their cooling infrastructure.
A second wave followed on 2 November, with more than 100 stores across Europe reporting problems.
Affected retailers were reportedly located in:
- Belgium
- Luxembourg
- Sweden
- Ireland
The attacks targeted digital refrigeration-control systems used by businesses and technicians to remotely monitor and adjust operating conditions.
Authorities have not yet identified those responsible for the attacks, nor confirmed whether all incidents formed part of a coordinated campaign.
From supermarkets to our homes
The incidents have renewed concerns about the security of everyday connected devices.
These so-called Internet of Things (IoT) devices include:
- Smart televisions
- Security cameras
- Smart doorbells
- Thermostats
- Air conditioners
- Smart plugs
- Washing machines
- Refrigerators
Many of these products can be monitored or controlled through mobile applications and cloud-based services.
While internet connectivity offers significant convenience, inadequate security measures can leave devices vulnerable to intrusion.
Depending on the nature of the vulnerability, a successful compromise could allow attackers to:
- Access systems without authorisation.
- Change device settings.
- Monitor audio or video feeds.
- Use compromised devices to launch attacks on other systems.
Eight steps to protect your devices
Cybersecurity agencies recommend several practical measures to improve protection for connected devices:
1. Secure your home Wi-Fi network
Your router is the gateway to all internet-connected devices in your home.
- Use a strong, unique password.
- Use a different password for router administration.
- Enable WPA3 encryption where available, or WPA2 if WPA3 is not supported.
2. Replace default passwords
If a device comes with a factory-set password:
- Change it immediately.
- Use unique passwords for each device and service.
- Avoid reusing passwords.
3. Enable multi-factor authentication
Where available, activate two-factor or multi-factor authentication to add an extra layer of protection.
4. Never ignore software updates
Software updates often address security vulnerabilities, not just add new features.
Ensure that:
- Smartphones
- Computers
- Smart TVs
- Cameras
- Connected home devices
are running the latest available software versions, and enable automatic updates whenever possible.
5. Limit remote access
If you do not actively use remote-control functions, disable them.
The same principle applies to unnecessary remote-management features on routers and networking equipment.
6. Create a separate network for smart devices
If your router supports it, connect IoT devices such as cameras and smart plugs to a separate network from the one used for personal computers and sensitive devices.
7. Monitor applications and connected devices
- Install apps only from trusted sources.
- Review the permissions applications request.
- Regularly check which devices are connected to your home network.
8. Consider cybersecurity before purchasing a device
Before buying a connected product:
- Check whether the manufacturer provides security updates.
- Determine how long the device will receive support.
- Remember that a device can continue functioning normally while no longer receiving security patches.
A device that works does not necessarily remain secure, particularly once manufacturer support ends.
