Back to Feed
IoT/OTOct 12, 2026

Cyberattack shuts down refrigerators at French supermarkets

Cyberattack defrosted refrigerators at hundreds of French supermarkets, causing food waste and financial loss.

Vendor Watch

Run Danfoss?

Get an email when a reviewed story names Danfoss, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

Summary

Attackers remotely defrosted refrigerators at 250-350 French supermarkets overnight by exploiting older Danfoss refrigeration controllers. The incident caused significant financial losses and food waste across chains like Intermarché, Carrefour Market, and Leclerc. French authorities have launched an investigation into the unprecedented attack.

The lesson from this incident

Full lesson

Attackers exploited known vulnerabilities in aging Danfoss refrigeration controllers to remotely disable refrigeration systems across hundreds of French supermarkets overnight, causing widespread food spoilage and significant financial damage. The root cause lies in unpatched, internet-exposed operational technology (OT) devices that lacked adequate network isolation from external threats. This incident highlights the growing danger of neglecting legacy industrial control systems (ICS) in retail and food supply environments, where cyber-physical attacks have direct, real-world consequences. The attack is a stark reminder that OT and IoT devices are increasingly targeted and must receive the same security rigor as traditional IT infrastructure.

What helps against this

How we list vendors

Indicators of Compromise

  • cve — CVE-2025-41450

Entities

Danfoss (vendor)Danfoss AK-SM 8xxA Series (product)refrigeration controllers (product)