{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB) · updates",
  "home_page_url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks",
  "feed_url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks/feed.json",
  "description": "Overnight on Oct 11 to 12, attackers took remote control of internet-exposed refrigeration controllers at hundreds of French supermarkets (Intermarché and Netto, Coopérative U, E. Leclerc and others), forcing fridges and freezers into continuous defrost with setpoints around 50°C, spoiling fresh and frozen stock and reportedly causing small fires. CERT-FR names Danfoss AK-SM and AK-SC series plus Copeland and Dixell xweb controllers, says campaigns are probably still ongoing, and tells operators to take every controller off the public internet. Most affected Danfoss units are end-of-life models (AK-SM 800, AK-SC 355) that get no fixes; the entry vector and attacker are still unconfirmed.",
  "language": "en",
  "_pwn": {
    "slug": "french-supermarket-refrigeration-controller-attacks",
    "severity": "critical",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks/feed.xml",
    "llms": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks/llms.txt",
    "json": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-22-c7914981",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-22-c7914981",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Dark Reading reports a little over 700 stores were hit in one night; a Sekoia analyst told Reuters Spain, Portugal, Poland, Germany and Belgium were also affected, and Les Mousquetaires (Intermarché, Netto) said the attack came through a refrigeration service provider.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Dark Reading reports a little over 700 stores were hit in one night; a Sekoia analyst told Reuters Spain, Portugal, Poland, Germany and Belgium were also affected, and Les Mousquetaires (Intermarché, Netto) said the attack came through a refrigeration service provider.\n\nSource: https://www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware-french",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware-french",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-16-f19a06af",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-16-f19a06af",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes a third version with separate steps for compromised and uncompromised units: remove internet exposure, check defrost ranges, restore access only via VPN, and reset and reconfigure compromised Danfoss units.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes a third version with separate steps for compromised and uncompromised units: remove internet exposure, check defrost ranges, restore access only via VPN, and reset and reconfigure compromised Danfoss units.\n\nSource: https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/",
      "date_published": "2026-10-16T00:00:00.000Z",
      "external_url": "https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-13-817651ca",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-13-817651ca",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR revises the alert to add Copeland xweb and Dixell xweb controllers, warns campaigns are probably still ongoing, and says a factory reset alone leaves end-of-life units vulnerable to recompromise.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR revises the alert to add Copeland xweb and Dixell xweb controllers, warns campaigns are probably still ongoing, and says a factory reset alone leaves end-of-life units vulnerable to recompromise.\n\nSource: https://www.csoonline.com/article/4235107/unplug-your-smart-fridges-french-supermarkets-warned-after-cyberattack.html",
      "date_published": "2026-10-13T00:00:00.000Z",
      "external_url": "https://www.csoonline.com/article/4235107/unplug-your-smart-fridges-french-supermarkets-warned-after-cyberattack.html",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-7f996d79",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-7f996d79",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Coopérative U CEO Dominique Schelcher confirms on X that a cyberattack hit the refrigeration installations of several stores overnight, calling it unprecedented and unacceptable.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Coopérative U CEO Dominique Schelcher confirms on X that a cyberattack hit the refrigeration installations of several stores overnight, calling it unprecedented and unacceptable.\n\nSource: https://x.com/schelcher/status/2109564928881308012",
      "date_published": "2026-10-12T00:00:00.000Z",
      "external_url": "https://x.com/schelcher/status/2109564928881308012",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-548957cc",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-548957cc",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes alert CERTFR-2026-ALE-012 on numerous compromises of Danfoss AK-SM and AK-SC refrigeration controllers. Danfoss says affected units ran outdated firmware and urges migrating legacy systems.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes alert CERTFR-2026-ALE-012 on numerous compromises of Danfoss AK-SM and AK-SC refrigeration controllers. Danfoss says affected units ran outdated firmware and urges migrating legacy systems.\n\nSource: https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/",
      "date_published": "2026-10-12T00:00:00.000Z",
      "external_url": "https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-11-185534b2",
      "url": "https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-11-185534b2",
      "title": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Overnight, attackers remotely hijack supermarket refrigeration controllers across France, forcing continuous defrost with setpoints around 50°C; Intermarché, Coopérative U and E. Leclerc confirm the attack.",
      "content_text": "Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Overnight, attackers remotely hijack supermarket refrigeration controllers across France, forcing continuous defrost with setpoints around 50°C; Intermarché, Coopérative U and E. Leclerc confirm the attack.\n\nSource: https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u",
      "date_published": "2026-10-11T00:00:00.000Z",
      "external_url": "https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u",
      "tags": [
        "critical"
      ]
    }
  ]
}