Attackers Hijack Danfoss Controllers to Heat French Supermarket Fridges

On the night of October 11, 2026, cyber attackers compromised Danfoss temperature controllers installed in French supermarkets, remotely raising the temperatures of commercial refrigeration units to approximately 50°C. The attack affected hundreds of stores across multiple retail chains, including Les Mousquetaires, compelling stores to discard large volumes of perishable goods.

The Danfoss controllers are devices used to manage and monitor refrigeration and freezer units across a store. Maintenance firms typically access these controllers remotely for servicing and updates. Investigations indicate that the attackers gained access to the controllers through the remote management pathway, manipulating temperature settings to induce heat.

Several French retail chains confirmed the incidents, reporting significant financial losses due to food disposal and supply disruption. The exact number of affected stores remains unspecified, but the scale is described as "hundreds." As of the time of reporting, no group has claimed responsibility, and the method of initial access to the controllers has not been detailed in public reports.

Danfoss has not been reported to have released a security patch at the time of writing. The incident highlights the risks associated with remote management interfaces for industrial control devices when exposed to the internet or protected with inadequate credentials.