[Edaily Lee So-Hyun Kang Min-koo Yun Junghoon Reporters] The temperature in European supermarket freezers soared to 50 degrees in the middle of the night. Hackers took control of the control systems of internet-connected refrigeration equipment, forcing stores to discard food and disrupting operations. As cyberattacks have evolved from data breaches into threats that manipulate physical infrastructure, warnings are emerging that South Korea is not immune to such risks.

According to AFP and other sources on the 8th, following last month’s hacking of refrigeration and freezing systems at some 700 supermarkets in France, similar incidents have spread this month to Belgium, Sweden, Estonia, Ireland, and Italy. Hacking incidents and abnormal activity have been reported in at least 11 European countries, including France.

Hackers infiltrated remote control devices to activate defrosting functions or alter temperature settings. Outdated equipment for which security updates had been discontinued and management systems exposed to the internet were identified as vulnerabilities.

The warning from this incident is that hacking can go beyond data breaches or network outages to actually alter the operation of physical equipment. Just as the temperature of a refrigerator was manipulated, if control systems for factory production facilities, power plants, or water treatment facilities are attacked, it could lead not only to operational shutdowns but also to equipment damage and safety incidents. In particular, as the number of industrial facilities connected to the internet and managed remotely increases, the avenues for external intrusion are also expanding.

Although the methods of attack vary, there have been a series of incidents where hacking has brought industrial operations to a halt. Last September, Japan’s Asahi Group experienced disruptions in its order and shipping systems due to a ransomware attack, causing delays in the production and supply of beer and beverages. That same month, Jaguar Land Rover in the UK also halted automobile production following a cyberattack. In South Korea, the computer networks at Kumho Tire’s Gwangju and Gokseong plants were infected with a virus in 2024, resulting in connectivity issues with the production management system and production disruptions.

Domestic hacking threats are also on the rise. According to the Korea Internet & Security Agency (KISA), reports of cyber incidents in the first half of this year totaled 1,236, a 19.5% increase compared to the same period last year. Among these, reports of cyber incidents in the manufacturing sector totaled 191, a 21.7% increase that exceeded the overall growth rate.

Yang Jong-heon, head of the Integrated Analysis Division at S2W, said, “There is a very real possibility that similar attacks could occur domestically as well,” adding, “This is because security risks associated with Internet of Things (IoT) devices depend largely on how the devices are connected and the level of security management, rather than on the country or region.”

Concerns extend beyond factories to hospitals and smart farms. If the temperature of blood or pharmaceutical storage facilities is tampered with, it threatens patient safety; similarly, if the control systems of fish farms or greenhouses are attacked, it could lead to fish deaths and crop damage.

Industrial sites also face constraints when strengthening security. Control equipment in factories and power plants has a long service life, and operations may be suspended during security updates or replacements, making immediate action difficult. Experts point out that since upgrading aging equipment requires both time and money, corporate security investments must be accompanied by government support.

The problem is that while the number of connected devices is increasing, the institutional safety net remains insufficient. In contrast to the domestic IoT market, which reached 30 trillion won last year, government security certifications totaled only 574 as of September this year. Only eight of these were “Standard” certifications, the highest security rating. Not only is the certification process self-regulated, but the relevant budget has also decreased by 30.8% over the past two years—from 1.2 billion won in 2024 to 830 million won this year. Although the National Assembly Research Service recommended in July that minimum security standards be established and certification for high-risk devices be made mandatory, the relevant amendment to the Information and Communications Network Act remains pending in the National Assembly.

Ha Young-bin, CEO of EverSpin, emphasized, “As the number of devices managed via the internet increases, cyberattacks could affect all aspects of daily life—including healthcare, food production, and housing,” adding, “The security of connected devices must be treated as part of safety management aimed at protecting human lives and livelihoods.”