Sweden’s National Cyber Security Centre says it identified up to about 3,000 devices exposed to the internet across the country. Coming after recent attacks on refrigeration and freezer systems, the finding puts a broader operational-technology risk in focus: the centre says exposed devices are present in retail, transport and logistics, water treatment, energy and industry.
At Tuesday’s cybersecurity briefing, the NCSC described the devices as systems that control or monitor physical processes and machinery. Connecting such systems to the internet for access and convenience also makes them attackable, NCSC head John Billow told SVT.
After the refrigeration and freezer attacks in several European countries, the NCSC contacted Swedish organisations where it had found exposed devices. SVT reported that not all acted before food shops, restaurants and picking warehouses in Sweden were affected in early November. Others had still not acted when the information was provided.
The centre also says Sweden has more exposed, vulnerable connected devices than its Nordic neighbours. Sweden’s larger size may explain part of the difference, Billow said, but not all of it. SVT’s report gives no public sector-by-sector breakdown of the roughly 3,000 devices and no complete explanation for the Nordic comparison.
That leaves no basis for ranking the sectors by risk. WUA’s editorial view is that the next scrutiny should focus on whether organisations that received warnings have reduced their internet exposure. That is a more useful question than speculation that all incidents share an attacker or technical cause.
Sources
- SVT Nyheter · Source date: 2026-11-10
Independent editorial content. WUA is not affiliated with any political party. 2026-11-10