In recent days, several grocery retailers in Italy and other European countries have experienced cyberattacks targeting refrigeration control systems. Based on the investigations conducted so far, there is no indication that ARNEG service management platform or the systems used by the Company call centres have been compromised.
No evidence has emerged of intrusions into stores through ARNEG’S remote management infrastructure.
Arneg designs, manufactures and installs commercial refrigeration solutions and supports its customers with after-sales assistance, monitoring and remote management services. In Italy, these services cover more than 2,600 stores: protecting refrigeration systems and maintaining service continuity are part of the daily commitment.
ARNEG’s proprietary platform uses encrypted VPN connections to connect to stores, role-based access controls, and tools for logging access and activities.
These safeguards form part of Company established approach to cybersecurity, which includes ISO/IEC 27001 certification, the leading international standard for information security, with a particular focus on continuous monitoring and employee training.
ARNEG continues to invest in the technological and organisational development of services, strengthening security measures, authentication mechanisms and access controls.
The recommendations that ARNEG consistently provided to customers align with the guidance in the security bulletin issued by Italy’s National Cybersecurity Agency (ACN) and anticipated some of its key measures: preventing direct exposure of supervisory systems to the internet, using secure VPN connections, and segregating refrigeration systems from other corporate networks. The Company also continues to help customers check access arrangements, configurations and necessary updates, while maintaining the active dialogue with ACN established in recent weeks.
Security also depends on maintaining correct configurations at store level. ARNEG therefore asks customers to coordinate any changes to connections and remote access arrangements with its technical contacts. Disconnecting these connections can interrupt monitoring and alarm management, preventing the Company from providing its remote management and support services.
To date, the available technical analyses show no evidence that Arneg systems have been involved. The Company continues to monitor the situation and will share any relevant updates through its official channels. ARNEG usual service contacts remain available for questions, reports or checks on store configurations.
Download the official Press Release