Attackers remotely hijacked fridges and freezers at hundreds of French supermarkets, warming them to 122°F and forcing stores to throw away food. The breach exploited Danfoss controllers, highlighting the risks of connected devices.
Imagine walking into your local supermarket and finding the freezer aisles warm and the ice cream melting. That's exactly what happened in France on the night of October 11, when attackers remotely hijacked the cooling systems at hundreds of stores, cranking up the temperature and forcing managers to toss out thousands of dollars' worth of food.
The attack wasn't a physical break-in. Instead, the hackers targeted a small but critical device: the controller that manages all of a store's fridges and freezers. Manufactured by Danish company Danfoss, these controllers are designed for remote management by maintenance crews. But that convenience became a vulnerability.
### How the Attack Unfolded
On that October night, someone gained unauthorized access to these controllers and turned up the heat. Temperatures inside the cooling units soared to as high as 122°F (50°C)—far above the safe zone for perishable goods. Stores had no choice but to discard meat, dairy, produce, and frozen items. Several retail chains, including Les Mousquetaires, confirmed the incident.
The attackers didn't need to be on-site. They exploited the remote access feature, which is typically protected by passwords and network security. But if those credentials are weak or reused, or if the network isn't properly segmented, it's like leaving the back door unlocked.
### Why This Matters for Your Business
This isn't just a grocery store problem. It's a wake-up call for any business that relies on internet-connected equipment—HVAC systems, refrigeration, manufacturing sensors, you name it. If it's online, it can be hacked.
> "The attack highlights a growing trend: cybercriminals are moving beyond data theft and into physical disruption," says Emily Davis, Head of Digital Privacy and Antidetect Browser Solutions at Antidetectbrowsershub. "They're finding that messing with the real world can be just as profitable—or just as damaging."
For retailers, the financial hit is twofold: lost inventory and lost customer trust. And for facility managers, it's a reminder that cybersecurity isn't just about firewalls and antivirus software.
### What Can You Do?
If your business uses remote-controlled systems, here are some practical steps:
- **Change default credentials.** Never leave factory passwords in place.
- **Use a VPN or secure gateway.** Don't expose controllers directly to the internet.
- **Segment your network.** Keep operational technology (OT) separate from IT networks.
- **Monitor for unusual activity.** A sudden temperature change should trigger an alert.
- **Have a manual override.** In case of an attack, you need a way to regain control.
### The Bigger Picture
As more devices get connected, the attack surface grows. The French supermarket incident is a clear example of how a single compromised controller can cause widespread chaos. It's not about if you'll be targeted, but when. And when that day comes, having a plan—and the right tools—can make all the difference.
So next time you reach for a gallon of milk, spare a thought for the invisible network keeping it cold. Because in today's world, even your groceries aren't safe from hackers.
