French supermarket refrigeration cyberattack: end-of-life gear bit

A refrigeration cyberattack turned freezers into ovens across France over the weekend. On the night of October 11 into 12, attackers remotely forced store refrigeration into constant defrost at hundreds of supermarkets, and chains had to throw out their fresh and frozen stock. According to AFP, the equipment was mostly legacy Danfoss controllers that no longer get security updates. Nobody stole a database. They just turned the heat up.

What actually happened

Per AFP's report, at least 300 Intermarché or Netto stores were targeted, along with more than 100 Coopérative U outlets and several E.Leclerc stores. The chains confirmed the attack. Reuters reported refrigeration temperatures pushed as high as 50°C (122°F) overnight. Intermarché said affected branches must discard all fresh and frozen products.

The method was not exotic. Refrigeration controllers run a defrost cycle to clear ice. The attackers triggered forced defrost remotely and kept it running. A source close to the matter said Danfoss control systems were the target. Danfoss told AFP that most affected equipment was legacy product with no security updates, naming the AK-SM800 and AK-SC355 regulators, plus an AK-SM800 version on outdated firmware.

Paris prosecutors opened an investigation and cited food losses and fires. France's cybersecurity agency identified a software vulnerability and contacted the vendor. No group has claimed it. Coopérative U's CEO called the attack "unprecedented."

Why it matters for your business

Every retailer we know has a box like this: a refrigeration controller, a building management system, a POS terminal, or a camera DVR that a contractor installed years ago and connected so they could monitor it remotely. It works, so nobody touches it. Then the vendor stops shipping patches and nobody tells you.

That is the real failure here. The controllers did what they were built to do. They were reachable, unpatched, and past end of life, and the result was inventory loss at hundreds of locations in a single night. For a grocery, restaurant, or any business with cold storage, that is a direct hit to the P&L.

Three moves. List every piece of connected equipment you own and who has remote access to it. Check each one's support status with the vendor; end of life means it goes on a replacement plan. And pull anything that controls physical systems off the open internet, behind a VPN or the vendor's managed access, with temperature alarms that page a human.

Sources: AFP via Yahoo News.