Two Italian companies have been targeted by cyberattacks involving systems used in the cold chain. A Tuscan company active in collective catering has notified Italy’s National Cybersecurity Agency (ACN) under the NIS framework. A second incident was detected at an Emilia-based frozen-food producer, although it has not yet been reported to the agency.
The incidents are part of a broader campaign affecting refrigeration and food-distribution operators in several European countries, including Belgium, Luxembourg, Ireland, the Netherlands, Latvia, Finland and Sweden. Similar episodes had previously affected supermarket chains in France.
In response, the ACN has intensified monitoring across Italy and urged large retailers, food-logistics companies, industrial refrigeration operators and maintenance providers to remain vigilant. The aim is to identify further incidents quickly and reduce exposure involving systems that control refrigeration equipment and temperatures.
The agency is advising companies to urgently check whether control and remote-assistance systems are directly exposed to the internet. Where they are, the systems should be isolated in protected environments separated from corporate networks. The ACN also recommends securing remote access through VPNs and multifactor authentication, reviewing accounts with elevated privileges, and updating or replacing devices that are no longer supported by their manufacturers.
The alert reflects the widespread presence of companies involved in the food supply chain. The ACN has called a meeting for tomorrow with industry associations and leading national retailers, offering its resources to strengthen companies’ defensive capabilities and accelerate preventive and mitigation measures where needed.
Sources: Il Sole 24 Ore Italia.