Skip to content
NewA calmer, faster ZeroHour
RansomwarehighExploited in the wild

Cybercrims go beyond stealing data to attack physical building systems

The Register · Securityby Jessica Lyons ()7 min read4
AI summary · grok-4.7-buildSummaries by Vani AI

Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.

Late Sunday, unknown attackers compromised remote refrigeration controls at hundreds of French grocery stores, raising temperatures, spoiling food, and causing fires. In August a ransomware attack on a Canadian hospital disrupted door access, HVAC monitoring, and staff badge issuance. ServiceNow’s Armis Labs reports 73 percent of organizations have building automation systems previously used in ransomware attacks and 91 percent of BAS communicate over insecure protocols. A Semperis consultant also described an extortion case in which attackers locked staff out of offices until police broke windows to regain entry.

Key facts
  • Unknown actors hacked refrigeration across hundreds of French grocery stores, spoiling food and sparking fires.
  • August ransomware hit a Canadian hospital’s door access, HVAC monitoring, and badge systems.
  • Armis: 73 percent of organizations own BAS used in ransomware; 91 percent use insecure protocols.
  • Intruders persist in lightly defended building systems, then pivot into corporate IT networks.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

7 min read at theregister.com

Late Sunday night, a still-unknown cybercriminal or group hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores , spiking temperatures, spoiling food, and sparking fires. This is part of an ongoing trend of attacking physical systems that can do damage in the real world.

The Register · Security

By Jessica Lyons · theregister.com

Read the full article at The Register · Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.