Overnight into November 2, 2026, freezers and refrigerators at more than 115 stores across Belgium, Sweden, Ireland, and at least three other European countries began climbing in temperature. Refrigeration systems had been tampered with remotely while the stores were dark. Some units reached 122°F. Managers at one major chain received text alerts around 4 a.m. Staff arrived in the morning to find food spoiled and systems they could not reset. At one Belgian location, losses were estimated at approximately 100,000 euros by the facility’s operator.

Four days earlier, on October 29, Binance’s preliminary investigation linked the largest cryptocurrency theft on record to compromised employee devices. More than $6 billion in digital assets moved across ten blockchains in roughly 20 minutes. By the time withdrawals were suspended, attackers had already established separate access that required a different process to revoke. The FBI attributed the theft to TraderTraitor, a North Korean state-sponsored group.

Neither attack started with something exotic. The refrigeration systems were running software the vendor had stopped updating and remained internet-exposed and accessible. The Binance breach traced back to compromised employee devices. Refrigeration controls are operational technology, the same category as machine controls, building systems, and remote vendor access for production equipment. The question is not whether attacks like these are occurring. It is whether your organization would know.

The A2K Cyber Risk Check is a seven-question self-assessment covering the areas that help you identify potential gaps in your security posture: authentication, backups, employee training, patch management, security monitoring, incident response, and data protection. Each question has five possible answers, scored from 1 to 4.

Your total score falls into one of four risk tiers:

Take the Cyber Risk Check

Answer based on what you know is actually in place, not what you’ve assumed or planned to do.

What Your Score Is Actually Measuring

Here is what each area of the assessment covers and why a gap in any one of them can expose the others.

Multi-Factor Authentication

MFA is one of the most effective controls for preventing unauthorized access. Stolen or phished passwords remain one of the most common entry points for attackers. Without MFA, a compromised password is all it takes to gain access to email, cloud apps, or remote systems. The risk is not just that MFA is missing. Partial deployment is nearly as dangerous: if MFA is required on email but not on the VPN or a cloud application, attackers route around it. Full enforcement across every account and access point is what closes the door. The Cybersecurity and Infrastructure Security Agency (CISA) formally lists single-factor authentication as a Known Bad Practice, citing it as an unacceptable risk for any system exposed to the internet.

Backups

Ransomware operators routinely target backup systems before launching an encryption attack. They look for backup repositories to delete or corrupt, eliminating a clean recovery path without paying. Backups that sit on the same network as your main systems, or that have never been tested, offer a false sense of security. Many organizations only discover their backups are incomplete or corrupted when they need them during a recovery event. Automated, encrypted, immutable, off-site backups with verified restore tests are what actually protect you. Anything less is a gap ransomware is built to exploit.

The ConnectWise Cloud Backup compromise beginning October 15, 2026 illustrates a specific variation of this risk. A leaked Microsoft 365 API credential belonging to the backup application gave attackers access to customer Microsoft 365 environments through the backup service itself, without requiring a direct attack on those organizations. Security firm Huntress identified at least 162 affected tenants within its own customer base. The backup service became the access vector.

Security Awareness Training

One-time onboarding training or an annual video does not change employee behavior. Regular, repeated simulated phishing tests do. The goal is building a reflex that causes an employee to pause before clicking a link or entering credentials on an unfamiliar page. According to IBM’s 2025 Cost of a Data Breach Report, phishing was the most common initial access vector, responsible for 16% of all breaches studied. Without ongoing training, your security controls are only as strong as your most distracted employee on their worst day.

Patch Management

Unpatched systems are how attackers expand access once they’re inside a network. Known vulnerabilities in Windows, network equipment, and applications are cataloged and actively scanned for by automated tools. Attackers do not need a sophisticated exploit if a publicly disclosed vulnerability has been sitting unpatched for six months. Organizations that run legacy operating systems because a piece of specialized software or hardware requires it are particularly exposed. That dependency is a real constraint, but it needs to be managed with compensating controls, not ignored.

The refrigeration attacks are a direct illustration. Security researchers reported that affected stores were running Danfoss and Copeland controller models that had stopped receiving security updates but remained connected to the internet. After similar incidents disrupted stores in France in October, CERT-FR, the French government’s incident response team, issued an advisory on October 12 recommending operators disconnect those controllers from public internet access and apply available updates. Three weeks later, a second wave hit stores across Belgium, Sweden, Ireland, and several other countries. For manufacturers, the equivalent question is what internet-connected equipment is running software past its support lifecycle. Production controls, environmental monitoring, building systems, and remote vendor access connections all belong on that list.

Monitoring and Incident Detection

Attackers do not always move immediately after gaining access. They map the network, identify the most valuable data, locate the backups, and establish additional access points before doing anything visible. Attacks are frequently timed for periods when response is slowest: nights, weekends, and holidays. The refrigeration attacks of November 2 ran through the night. Refrigeration technicians began disconnecting affected systems around 1 a.m. Managers at one major chain received text alerts closer to 4 a.m. When a gap is found, the window can be very short: the Binance theft moved more than $6 billion in roughly 20 minutes.

Incident Response Planning

When ransomware hits, decisions need to be made immediately: what gets isolated, whom to call, what to communicate to customers and vendors, and how to sequence recovery. Organizations without a documented, tested plan make those decisions under pressure with incomplete information. IBM’s 2025 Cost of a Data Breach Report found that organizations took an average of 241 days globally to identify and contain a breach. The average U.S. breach cost reached $10.22 million. A response plan written two years ago and never revisited carries the same risk: personnel change, infrastructure changes, and an outdated plan ends up creating as much confusion as having no plan at all.

The Binance response offers a useful reference point. After the October 29 theft, Binance coordinated with the FBI, worked with exchanges to freeze affected assets, covered the financial impact without passing losses to users, and began restoring withdrawals in phases on November 1. A coordinated, pre-planned response allowed the company to resume operations within days. Most organizations do not have comparable resources, which makes the response plan more important, not less.

Data Protection and Access Controls

Not every employee needs access to every file. In organizations where permissions have not been actively managed, access granted for a specific project never gets revoked, and former employees sometimes retain credentials longer than they should. When ransomware executes, it can encrypt everything it has access to, based on the permissions of the account it runs under. Broad access means broader damage. When a breach involves customer data, financial records, or intellectual property such as CAD files and product designs, the blast radius depends entirely on how tightly access was controlled before the event.

What Comes After the Quiz

The Cyber Risk Check tells you where to look. It does not scan your environment, review your Active Directory, test your backup restore process, or identify the specific vulnerabilities an outside attacker could reach from your network perimeter.

CADimensions offers a full Cybersecurity Risk Assessment through its partner Advance2000, a managed IT and cybersecurity provider with more than 30 years of experience, a 4.7/5 customer satisfaction rating, and an average support response time of under one minute. An Advance2000 engineer conducts a detailed review of your systems and security controls and delivers a 100-page PDF report with an executive risk summary, detailed technical findings, a ranked remediation roadmap, and budgetary estimates for recommended fixes. The process requires about one hour of your team’s time and approximately four engineer hours per office location.

The assessment covers:

• Cybersecurity controls and configuration
• External and internal vulnerabilities, including active scanning
• MFA, identity, and access management
• Endpoint protection, EDR, and MDR coverage
• Email security and phishing risk
• Active Directory health
• Backup integrity and resiliency

Deliverables include a results walkthrough session with your team and compliance alignment coverage across CMMC, ITAR, NIST SP 800-171, GDPR, and HECVAT. Optional follow-on services include 24/7 endpoint monitoring, human-led threat investigation, and disaster recovery planning.

The assessment is typically priced at $1,500. Contact us to confirm current pricing and availability. Request your assessment.