Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
AI-summarised brief · reviewed before publication
On the night of October 11, attackers remotely seized control of Danfoss‑manufactured refrigeration controllers in hundreds of French supermarkets, forcing fridges and freezers to enter defrost mode and heat up to 50 °C. The breach affected two Danfoss series, the AK‑SM and AK‑SC, many of which are legacy models no longer receiving security updates. French CERT‑FR urged operators to disconnect or tightly filter internet access to these devices. Intermarché’s Les Mousquetaires reported total loss of perishable goods and projected tens of millions of euros in damages, while Coopérative U said most stores preserved stock thanks to rapid staff response. Danfoss confirmed the incidents involved older units and some newer AK‑SM 800A devices running outdated firmware, and it is working with customers on firmware patches and network hardening.
💡 Why It Matters
- · The attack exposes the risks of exposing legacy industrial IoT controllers to the internet, turning a supply‑chain vulnerability into a direct financial loss for retailers.
- · It underscores the urgent need for manufacturers and operators to retire unsupported devices and enforce strict remote‑access controls.
