Supermarket Refrigeration Controllers Compromised Across Europe, Affecting British Meat Suppliers
What Happened — Early Monday, attackers exploited an authentication‑bypass flaw in Copeland XWEB supervisory controllers (firmware ≤ 1.12.1). The vulnerability allowed remote takeover of refrigeration units in supermarkets and grocery stores across Europe, forcing defrost cycles that threatened perishable stock. Three British meat‑supplier members of the Association of Independent Meat Suppliers (AIMS) were hit; a fourth wholesaler, Langridge Organic, observed the intrusion in real time and manually disconnected a fridge. No meat was lost, but the incidents highlight that any supply‑chain participant using the same firmware is exposed. Copeland confirmed the issue, re‑issued patch guidance, and urged customers to apply the August‑released firmware update. The UK National Cyber Security Centre (NCSC) is assisting affected firms and reaching out to organizations still running vulnerable versions.
Why It Matters for Trust & Control Assurance — The episode tests the control objective of secure configuration and access control for operational technology (OT) devices; continuous evidence of patch management and authentication hardening is essential for audit readiness.
Who Is Affected — Food‑production and grocery‑supply chain firms using Copeland XWEB controllers; broader retail and industrial IoT environments with similar OT devices.
Recommended Actions —
- Inventory all temperature‑control and OT devices.
- Verify firmware versions against the vendor’s advisory and apply the latest patches.
- Document the remediation steps and retain evidence of updated authentication settings for audit purposes.
Technical Notes — Attack vector: exploitation of a severe authentication‑bypass vulnerability in Copeland XWEB firmware (versions 1.12.1 and earlier). No CVE identifier was disclosed publicly. The flaw allowed attackers to issue remote commands without credentials, leading to unauthorized defrost commands. Source: https://therecord.media/british-businesses-caught-in-europe-wide-supermarket-fridge-attacks