Hacked supermarket fridges: what every business can learn

Imagine opening your shop in the morning to find the frozen food aisle warm and the stock ruined, not because of a power cut but because someone on the other side of the world changed a setting. That is what happened to hundreds of French supermarkets in early October 2026, and it is a warning for every organisation that owns "smart" equipment.

What happened

France's finance minister told parliament that about 700 of the country's roughly 10,000 supermarkets were affected. Chains including Intermarché, Netto, Système U, Carrefour and Monoprix reported problems. According to reports, attackers forced refrigeration into a continuous defrost cycle, pushing temperatures in some cases to around 50°C, so food had to be thrown away. Investigators also looked into reports of fires.

The attackers went after the small controllers that manage shop refrigeration, made by companies including Danfoss and Copeland. France's national cybersecurity agency said it was aware of many compromised remote-control modules. The makers said most affected units were older products that no longer receive security updates. In the summer, researchers had already reported that thousands of these controllers were reachable directly from the internet.

Why this is not just a supermarket problem

This is a classic example of operational technology (OT), the computers that control physical things such as fridges, heating, lifts, door locks, CCTV, pumps and production lines. OT is often:

• installed by an outside contractor and then forgotten;
• left with a default or shared password;
• connected to the internet so a technician can check it remotely;
• kept for ten or fifteen years, long after the maker stops releasing fixes.

Put those together and you get a device that controls something important, has a web page anyone can find, and will never be patched. Search engines that index internet-connected devices make finding them easy. Our note on what IoT is explains the wider picture.

A checklist for any shop, school or office

1. Make a list. Write down every device with a network cable or Wi-Fi: CCTV recorders, door entry, building management, fridge and HVAC controllers, printers, smart TVs. Include who installed each one.
2. Ask "can the internet reach it?" If a contractor uses remote access, find out how. A device whose control page is open to the internet is the biggest risk.
3. Put it behind something. Remote access should go through a VPN or a vendor's secure remote-access service, not an open port on the router.
4. Separate it. Put these devices on their own network or VLAN, away from staff laptops and card machines. See VLANs explained.
5. Change default passwords and remove accounts that are no longer needed.
6. Plan for end of life. When a maker stops providing updates, budget to replace or isolate the device.
7. Know what "normal" looks like, so staff report odd behaviour, such as a fridge alarm at 3 a.m., quickly.

A note for IT staff

In many organisations, OT belongs to "facilities", not IT, and nobody owns its security. If you work in IT support, offering to help facilities build the list above is one of the most valuable things you can do. It is also excellent experience for your CV.

Sources

• AP via ClickOnDetroit: Cyberattack targeting refrigeration systems hits 700 supermarkets
• SecurityWeek: Supermarket refrigeration attack widens to Copeland, Dixell controllers
• OCCRP: Hackers turn French supermarket refrigerators into furnaces