← Back to the feed

Hackers disrupt refrigeration at 700 French supermarkets, spoiling food and causing fires

Ars Technica ·

Refrigeration systems at an estimated 700 supermarkets in France were hacked, causing fridges and freezers to heat up, food to spoil and some electrical fires. The incident shows how weak security on internet-connected equipment can disrupt essential services and lead to major financial losses.

Attackers compromised remote-management controllers from Danfoss, Dixell and Copeland, reportedly exploiting outdated software and serious vulnerabilities. Researchers say keeping the devices off the public internet, requiring VPN and approved IP access, changing credentials and applying updates could have prevented the breach. Supermarkets in Spain, Portugal, Poland, Germany and Belgium were also reportedly affected; the attackers’ motive remains unknown.

  • Hackers disrupted refrigeration at around 700 French supermarkets.
  • Spoiled food and fires followed the controller breach.
  • Researchers say basic security measures could have blocked it.

New here? Start with this

Supermarkets use electronic controllers to monitor and adjust the temperature of fridges and freezers. Some can be managed remotely by staff or maintenance teams, which helps them respond to faults across many stores.

Danfoss, Dixell and Copeland make equipment used in refrigeration systems. If attackers gain access to the controllers, they may be able to change how the equipment operates. Older software, exposed internet connections and weak access controls can make such devices easier to compromise.

Food retailers depend on refrigeration to keep stock safe, so a failure can mean wasted food, disrupted trading and repair costs. Similar reports from several European countries suggest the effects may extend beyond France; the attackers’ motive has not been established.

Business Cybersecurity Markets Technology

Read the full article at the source →

Originally published by Ars Technica as “Fridge hack costing millions and sparking fires stemmed from poor security”.

Cookie-free view counts · Privacy choices

We count page views to improve this website, including before you choose optional analytics. This counter keeps only a daily total: no visitor IDs, page addresses or browsing histories. It uses no tracking cookies and sends no data to Google or Microsoft. Optional analytics add richer reports if you accept them.

Your choice is remembered using a preference cookie. Rejecting analytics, Do Not Track and Global Privacy Control also stop this counter. Ordinary server access logs are separate.