<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB) · updates</title>
  <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
  <description>Overnight on Oct 11 to 12, attackers took remote control of internet-exposed refrigeration controllers at hundreds of French supermarkets (Intermarché and Netto, Coopérative U, E. Leclerc and others), forcing fridges and freezers into continuous defrost with setpoints around 50°C, spoiling fresh and frozen stock and reportedly causing small fires. CERT-FR names Danfoss AK-SM and AK-SC series plus Copeland and Dixell xweb controllers, says campaigns are probably still ongoing, and tells operators to take every controller off the public internet. Most affected Danfoss units are end-of-life models (AK-SM 800, AK-SC 355) that get no fixes; the entry vector and attacker are still unconfirmed.</description>
  <language>en</language>
  <lastBuildDate>Thu, 22 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Dark Reading reports a little over 700 stores were hit in one night; a Sekoia analyst told Reuters Spain, Portugal, Poland, Germany and Belgium were also affected, and Les Mousquetaires (Intermarché, Netto) said the attack came through a refrigeration service provider.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-22-c7914981</guid>
    <pubDate>Thu, 22 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware-french&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes a third version with separate steps for compromised and uncompromised units: remove internet exposure, check defrost ranges, restore access only via VPN, and reset and reconfigure compromised Danfoss units.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-16-f19a06af</guid>
    <pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR revises the alert to add Copeland xweb and Dixell xweb controllers, warns campaigns are probably still ongoing, and says a factory reset alone leaves end-of-life units vulnerable to recompromise.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-13-817651ca</guid>
    <pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.csoonline.com/article/4235107/unplug-your-smart-fridges-french-supermarkets-warned-after-cyberattack.html&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Coopérative U CEO Dominique Schelcher confirms on X that a cyberattack hit the refrigeration installations of several stores overnight, calling it unprecedented and unacceptable.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-7f996d79</guid>
    <pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://x.com/schelcher/status/2109564928881308012&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): CERT-FR publishes alert CERTFR-2026-ALE-012 on numerous compromises of Danfoss AK-SM and AK-SC refrigeration controllers. Danfoss says affected units ran outdated firmware and urges migrating legacy systems.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-12-548957cc</guid>
    <pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-012/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB): Overnight, attackers remotely hijack supermarket refrigeration controllers across France, forcing continuous defrost with setpoints around 50°C; Intermarché, Coopérative U and E. Leclerc confirm the attack.</title>
    <link>https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks</link>
    <guid isPermaLink="false">https://pwn.watch/i/french-supermarket-refrigeration-controller-attacks#2026-10-11-185534b2</guid>
    <pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
