Refrigeration Controller Hack Spoils Food Across European Supermarkets
Cyberattack targets refrigeration controllers in European supermarkets, spoiling food.
Run Danfoss?
Get an email when a reviewed story names Danfoss, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A widespread cyberattack has disrupted refrigeration systems in hundreds of European supermarkets, causing significant food spoilage. Attackers reportedly exploited vulnerabilities in Danfoss refrigeration controllers, remotely setting temperatures to 50°C and initiating defrost cycles. The attack, which affected multiple supermarket chains across several countries, highlights the critical security risks in operational technology (OT) environments.
The lesson from this incident
Full lessonAttackers exploited unpatched vulnerabilities in internet-exposed Danfoss refrigeration controllers to remotely manipulate temperatures across hundreds of European supermarkets, causing widespread food spoilage. This incident underscores a critical and often overlooked risk: Operational Technology (OT) devices such as HVAC and refrigeration controllers are frequently deployed with default configurations, minimal authentication, and delayed patching cycles — making them attractive targets. Unlike IT systems, compromised OT devices can cause direct physical harm, financial loss, and public safety consequences. The attack demonstrates that OT environments must be treated with the same security rigor as enterprise IT infrastructure.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.