Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

The root cause of this attack lies in the widespread use of end-of-life industrial controllers that no longer receive security patches, leaving them permanently vulnerable to known exploits. Exposing operational technology (OT) devices — such as refrigeration controllers — directly to the internet dramatically expands the attack surface for critical infrastructure. The consequences went beyond data loss, causing physical damage including food spoilage and fires, illustrating that OT cyberattacks carry real-world safety and financial consequences. This incident highlights how organizations often underestimate the risk posed by legacy embedded systems in environments traditionally considered 'non-IT.' Failing to segment or monitor these devices from internet-facing networks turns a manageable vulnerability into a wide-scale operational crisis.