Hackers broke into internet-exposed refrigeration controllers used by French supermarkets and forced some units into nonstop defrost mode, spoiling food and causing major losses. ANSSI said the affected products include Danfoss AK-SM and AK-SC, Copeland xweb, and Dixell xweb controllers; some were end-of-life systems exposed directly to the internet. French prosecutors said about ten complaints have been filed and estimated around 700 victims.
Why it matters: This is a real-world operational technology attack that caused physical disruption and financial damage across retail stores, not just an IT outage. Operators should urgently disconnect or tightly filter any internet-exposed refrigeration or other building-control systems, especially unsupported products, and review whether compensating controls are in place because vendors may not issue fixes for end-of-life devices.
2026.10.20
100% relevant
This article establishes the attack as a distinct tracked event by naming the affected controller families, estimating victim count at around 700 supermarkets, and adding concrete regulatory implications under the EU Cyber Resilience Act.
← Back to all stories