Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets

This attack exploited legacy operational technology (OT) controllers managing refrigeration systems — devices that are often overlooked in traditional IT security programs due to their specialized nature and long operational lifespans. The root cause lies in unpatched, aging OT hardware that was likely internet-accessible with little to no network isolation from the broader corporate environment. What makes this incident particularly alarming is the direct physical consequence: compromised food safety, spoiled inventory, and significant business disruption — demonstrating that cyber threats to OT are no longer theoretical. Organizations managing critical infrastructure must recognize that any networked device, regardless of its function, represents a potential attack vector. This incident underscores the urgent need to extend cybersecurity governance to OT and industrial control systems (ICS) with the same rigor applied to IT assets.