# Mass Refrigeration Hack Causes Spoilage and Fires in France Critical vulnerabilities in internet-connected controllers allowed attackers to remotely disable supermarket cooling systems. - **Source:** [Ars Technica - All content](https://brifing.si/source/b728770c-8dda-457a-8986-84879c9fc42c) - **Published:** 2026-10-14 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/af3d8ba4-ff67-4ae4-8397-ce2b4c0490df ## Massive Refrigeration System Breach A coordinated cyberattack targeted refrigeration systems in approximately 700 French supermarkets this week. The breach caused widespread malfunctions, leading to significant spoilage of perishable goods. In several instances, the forced temperature spikes triggered electrical fires, demonstrating the severe physical consequences of poor cybersecurity practices in modern retail infrastructure environments. ## Compromised Remote Access Controllers The attackers specifically targeted internet-connected controllers designed for remote system administration. By gaining unauthorized access, they manipulated the units to activate defrost cycles. This resulted in internal temperatures reaching 50 degrees Celsius, or 122 degrees Fahrenheit. These devices serve as the central management hub for entire store-wide cooling fleets. ## Predictable Credential Generation Flaws Security investigations revealed that three specific controller models from Danfoss, Dixell, and Copeland contained critical vulnerabilities. These flaws allowed attackers to bypass authentication and gain full administrative rights. The systems relied on daily passwords generated by firmware based on the current date, which remained identical across thousands of individual units. ## Firmware Analysis Facilitated Exploitation Attackers exploited the predictable nature of the daily password generation algorithm. By analyzing publicly available firmware, hackers could calculate the valid credentials for any device that lacked recent security updates. Because these passwords were standardized across models, a single successful analysis enabled access to a vast network of store systems. ## Physical Damage and Operational Impact The incident highlights the dangerous intersection of digital vulnerabilities and physical hardware. Beyond the financial loss from spoiled inventory, the forced overheating caused electrical systems to ignite. This event underscores how outdated security protocols in industrial IoT devices can directly threaten the structural safety of large-scale retail facilities and operations. ## Manufacturer Security Oversight Issues The affected controllers, manufactured by Danfoss and Copeland, failed to implement robust authentication standards. Relying on time-based, publicly derivable passwords provided a false sense of security for remote management. These vulnerabilities were documented in multiple security advisories, yet many systems remained unpatched, leaving them exposed to this widespread, coordinated remote attack. ## The Need for Patch Management The incident serves as a stark reminder of the necessity for rigorous patch management in connected industrial systems. While firmware updates were available to address these credential flaws, many operators failed to apply them. This gap between vulnerability disclosure and actual deployment allowed attackers to execute their campaign across hundreds of locations. ## Implications for Industrial IoT Security This breach marks a critical turning point for IoT security in the retail sector. As infrastructure becomes increasingly interconnected, the reliance on legacy authentication methods poses an existential risk to physical assets. Future deployments must prioritize unique, non-predictable credentials and isolated network architectures to prevent similar large-scale operational failures from occurring. ## Sources covering this story - https://arstechnica.com/security/2026/10/fridge-hack-costing-millions-and-sparking-fires-stemmed-from-poor-security/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._