ARNeg: Cyber Attacks on Retail Refrigeration Control Systems Did Not Affect Remote Management Platform

ARNeg reports that, based on completed internal reviews, no compromise of its service management platform or corporate call-centre systems has been detected. The statement was issued against the backdrop of attacks on refrigeration equipment control systems that affected a number of organised retail operators in Italy and other European countries. No signs of intrusion into retail sites through ARNEG's remote-management infrastructure have been found; technical analyses available to date also do not indicate involvement of the company's systems. ARNEG continues to monitor the situation and will publish significant updates through its official channels.

Platform Security Architecture

ARNeg's remote-management platform uses encrypted VPN connections for communication with retail sites, role-based access control, and logging tools for access and operations. These measures are embedded in an information-security system certified to ISO/IEC 27001, with an emphasis on continuous monitoring and staff training. The company continues to invest in the technological and organisational development of its services, strengthening security measures, authentication mechanisms, and access controls.

Recommendations for Clients

In line with the National Cybersecurity Agency (ACN) bulletin and ahead of several of its provisions, ARNEG recommends:

• not exposing controllers (supervisors) directly to the internet;
• using protected VPN connections;
• segregating refrigeration-equipment networks from other corporate networks.

The company continues to support clients: verifying access, configurations, and required updates. Dialogue with ACN has been ongoing since previous weeks. ARNEG asks clients to coordinate with the company's technical representatives on any changes to connections and remote-access methods: disconnecting connections may interrupt monitoring and alarm management, making the remote-management service unavailable.

Context

ARNeg designs, manufactures, and installs solutions for commercial refrigeration equipment and provides service maintenance, monitoring, and remote management. In Italy, the company's services cover more than 2,600 retail sites; equipment protection and service continuity are part of the company's daily operations.