Cold-chain ransomware: what the last twelve months taught us

Across the incidents CSAFI reviewed this year, the pattern was consistent: the intrusion began in an IT system with a route into the warehouse-management estate.

The operators who recovered fastest had three things in common — an offline copy of the temperature record, a rehearsed manual despatch process, and a named person on call at the refrigeration vendor.