GoKawiilFrench supermarket fridge hack exploited known flaws in Danfoss, Copeland controllers
Attackers remotely compromised Internet-connected refrigeration controllers at an estimated 700 French supermarkets this week, triggering defrost cycles that pushed temperatures to as high as 50°C. The malfunction spoiled large quantities of perishable food and caused electrical fires in some stores, French authorities said. The controllers involved, made by Danfoss, Dixell and parent company Copeland, had publicly documented critical vulnerabilities, including a Danfoss credential-generation scheme that could be reverse-engineered from publicly available firmware.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how industrial control devices tied to everyday infrastructure like supermarket refrigeration can be compromised using vulnerabilities that were already known and, in several cases, already patched by vendors in recent months. This suggests many stores had not applied available firmware updates, leaving widely deployed hardware exposed across thousands of locations using the same weak authentication scheme. It underscores a broader pattern in which internet-connected operational technology remains an easy target when basic patching and credential hygiene are neglected.
- Roughly 700 French supermarkets had refrigeration systems disabled by a coordinated hack this week.
- Controllers from Danfoss, Dixell and Copeland had publicly known critical vulnerabilities, including predictable daily passwords.
- The attack caused food spoilage and, in some stores, fires, despite fixes for many of the flaws having been released recently.
Source: arstechnica.com, 2026-10-14
Published there as: “Fridge hack costing millions and sparking fires stemmed from poor security”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.