Particle.news
Get it on Google Play
Download on the App Store
16 ARTICLES
·
3h ago

Governments Warn Hackers Are Targeting Internet‑Connected Refrigeration Controllers

Exposed refrigeration controllers create immediate risks for food and medical cold chains.

A woman walks past empty fresh-food refrigerators at an Intermarché supermarket in Névez, western France, on October 12, 2026, following a cyberattack affecting the French supermarket chains Intermarché and Cooperative U that caused their refrigerators to defrost. Some 150 to 200 Intermarché stores were targeted in the attack on October 12, 2026, along with nearly 100 Coopérative U outlets, the retailers said. BFM TV reported that rival giant E. Leclerc was also affected, with hackers "managing to remotely trigger the forced defrosting of refrigeration systems in numerous stores." (Photo by Fred TANNEAU / AFP via Getty Images)
Shutterstock
Image
Illustration: Brendan Lynch/Axios. Stock: Getty Images

Overview

  • Security agencies traced a series of incidents that began in October and escalated into waves that hit hundreds of European supermarkets and triggered temperature spikes at French blood‑storage sites.
  • On November 5 the US CISA, FBI, HHS, USDA and DOT issued a joint advisory saying attackers are exploiting internet‑accessible or end‑of‑life controllers to change setpoints, force continuous heating or run defrost cycles.
  • Technical analysis and agency warnings name specific failings: unpatched firmware, default or weak credentials, authentication bypass and the ability to inject code or hide current temperature readings.
  • Authorities and vendors have urged immediate steps such as removing controllers from direct internet access, isolating OT networks, replacing unsupported devices, enforcing strong authentication, and Censys data shows a sharp drop in exposed Danfoss and Copeland/Dixell units consistent with those actions.
  • The attacks caused widespread food spoilage, some fires, and near‑misses at blood banks, and they underscore how overlooked operational‑technology security in the cold chain can produce real‑world harm and wider supply‑chain risk.