GoKawiilDanfoss StoreView refrigeration controllers remain exposed to internet attacks, tracker shows
An independent monitoring project reports that supermarket refrigeration systems using Danfoss StoreView controllers continue to be found exposed on the open internet and targeted by attackers, with a fresh wave of incidents recorded on 2 November 2026. The tracker counts distinct IP addresses hosting these services, noting that exposure doesn't necessarily mean a system has been compromised, since one address can front multiple controllers managing many fridges.
GoKawiil's interpretation of the reporting above, not reported fact.
The persistence of exposed industrial control systems years after such vulnerabilities became known suggests patching and network segmentation remain inconsistent across retail refrigeration deployments, which could leave food safety and cold-chain operations vulnerable to disruption. The tracker's methodology—distinguishing indexed services from deduplicated IPs and filtering honeypots—indicates the true scale of real-world exposure is difficult to pin down precisely, meaning public figures likely represent a lower bound rather than a complete picture.
- A security tracker recorded a new wave of attacks on exposed Danfoss StoreView refrigeration controllers on 2 November 2026.
- The monitoring project measures distinct exposed IP addresses, which may each control multiple fridge units, as a proxy rather than exact count.
- Exposure data has been collected over time alongside firmware version tracking to assess whether the exposed fleet is being updated.
Source: arethefridgesok.org, 2026-11-03
Published there as: “Are the Fridges Ok?”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.