Mass hack of 700 French supermarket refrigeration systems caused spoilage and fires through exploited controller vulnerabilities
Attackers compromised internet-connected refrigeration controllers at 700 French supermarkets using known critical security flaws, remotely activating defrosters and destroying perishables.
What happened
An estimated 700 supermarkets throughout France experienced a coordinated hack of their refrigeration systems earlier this week. Attackers gained access to internet-connected controllers that manage store-wide fleets of refrigerators and freezers, then remotely activated defrosters to raise internal temperatures to as high as 50°C (122°F). The compromise resulted in widespread food spoilage and, in some cases, fires in electrical systems. Three controller models from vendors Danfoss, Dixell, and Copeland were reportedly compromised. The vulnerabilities exploited had been previously documented in security advisories and public research reports.
Context
The hack exploited critical, known vulnerabilities that vendors had documented and in some cases recently patched. Danfoss controllers used a daily-changing password generated by publicly available firmware based on the date—a credential that remained identical across hundreds or thousands of store deployments and could be reverse-engineered by analyzing the code. Similar remote-access vulnerabilities in Copeland and Dixell controllers were only recently fixed. The incident demonstrates that basic cybersecurity practices and timely patching could have prevented the widespread operational disruption, product loss, and fire hazards across a major retail infrastructure.
What's disputed
The identity of the attackers is not identified. The sourcing does not specify the exact tonnage of spoiled perishables or precise financial cost, though the headline references millions in damage.