The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Internet-connected refrigerators targeted in attacks across Europe and US military bases.
Run Danfoss?
Get an email when a reviewed story names Danfoss, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A series of cyberattacks have targeted internet-connected refrigerators in France, impacting blood labs and grocery stores by raising temperatures. Similar incidents have also affected supermarkets across Europe and commissaries on US military bases, leading to significant food spoilage. While the perpetrators remain unclear, potential links to Russia or Iran are being investigated, and attackers are reportedly exploiting unpatched controllers with weak passwords.
The lesson from this incident
Full lessonAttackers exploited internet-connected refrigeration controllers that were running outdated firmware and secured with weak or default passwords, causing temperature manipulation that spoiled food and compromised blood supplies. This incident highlights the dangerous real-world consequences when operational technology (OT) and IoT devices are treated as low-priority assets in security programs. The attack surface expands dramatically when critical infrastructure devices are internet-exposed without hardening. It matters not only because of financial losses but because compromised cold chain integrity can endanger lives — particularly in medical settings where temperature-sensitive blood products are stored.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.