Felix

Prime

The refrigeration controllers hijacked overnight in hundreds of French supermarkets were running out-of-date firmware, Danfoss said.Attackers turned fridges up to 50 degrees Celsius, leaving stores to toss out fresh and frozen stock.
A source close to Prime Minister Sebastien Lecornu said that France’s cybersecurity agency, ANSSI, had discovered a vulnerability in software from Danfoss. The person said the agency had already reached out to the vendor.
<h3 id="span-style-font-weight-400-danfoss-names-ak-sm800-and-ak-sc355-legacy-controllers-span">Danfoss names AK-SM800 and AK-SC355 legacy controllers</h3>
Danish maker Danfoss said it was “aware of incidents in France affecting a limited number of refrigeration management systems.” It identified two product lines, the AK-SM800 and the AK-SC355.
Most of the affected hardware is legacy kit that “no longer receive software or security updates,” the company <a href="https://www.cbsnews.com/news/cyberattack-supermarkets-refrigerators-france-fires-food-losses/" rel="noopener noreferrer nofollow">said</a>. The affected units reportedly ran regulation software that predated version 4.
The affected systems “were running outdated firmware,” Danfoss <a href="https://www.reuters.com/business/retail-consumer/french-supermarket-chain-intermarche-hit-by-cyberattack-150-stories-targeted-2026-10-12/" rel="noopener noreferrer nofollow">said</a>. It also said it had “long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions.”
A supermarket’s cold rooms and cold cabinets are controlled from one linked panel. The panel controls temperature and defrost cycles, short periods when equipment heats up to melt ice.
It looks like the attackers commandeered the defrost function and ran it nonstop at 50 degrees.
In August 2026, Team82 from Claroty published research on the Danfoss AK-SM 800A, the system manager that orchestrates a facility’s refrigeration controllers. The team disclosed three vulnerabilities: CVE-2025-41450, authentication bypass using a hidden password based on the current date; CVE-2025-41451, command injection in email-alert configuration leading to remote code execution after login; and CVE-2025-41452, Nginx configuration injection able to cause denial of service.
Danfoss patched the flaws in firmware R4.3.1. Researchers also uncovered thousands of such management interfaces exposed to the public internet.
There’s no confirmed connection between that research and this week’s attack.
<h3 id="span-style-font-weight-400-intermarch-owner-counts-150-stores-hit-for-six-hours-span">Intermarché owner counts 150 stores hit for six hours</h3>
Les Mousquetaires, the owner of Intermarché, said refrigerators at about 150 of its stores were at 50 degrees for six hours overnight. All the food concerned was binned to forestall any health risk, the group said.
At an Intermarché in central Paris, staff tipped cartloads of thawed food into a skip. Melted ice cream spilled onto the pavement.
Carrefour said 80 of its supermarkets were hit and that the vast majority of its 6,000 outlets were untouched. Monoprix, which has some 490 stores in France, said 5% had been hit.
Going after equipment indispensable to preserving fresh products and feeding French shoppers “is of extreme gravity and is unprecedented,” Coopérative U CEO Dominique Schelcher wrote on X.
<figure style="width: 100%" class="wp-caption aligncenter"><img src="https://www.cryptopolitan.com/wp-content/uploads/2026/10/2026-10-12-french-fridges-hackers-50c-outdated-firmware-01.png" alt="French supermarket fridges hackers heated to 50C ran outdated firmware." width="621" height="397">
 <figcaption>
 Coopérative U CEO Dominique Schelcher confirms the attack in a post on [X](https://x.com/schelcher/status/2109564928881308012) on October 12, 2026, shown in X’s English translation.
 </figcaption>
</figure>Thierry Cotillard, CEO of Intermarché, estimated the potential losses at tens of millions of euros across the country in a single day. Paris prosecutors opened an investigation into what they described as a large-scale attack. 
Attacks also hit Spain, Portugal, Poland, Germany and Belgium, Sekoia threat analyst Felix Aime said.
Earlier this year, <a href="https://www.cryptopolitan.com/france-breach-taxpayer-data-exposed-crypto/" rel="noopener noreferrer nofollow">Cryptopolitan</a> reported that France’s tax authority had suffered a breach leading to a loss of some 700,000 taxpayers’ data. Then the government announced it would hire sovereign AI firms like <a href="https://www.cryptopolitan.com/france-mistral-not-openai-cyber-tax-hack/" rel="noopener noreferrer nofollow">Mistral</a>, and not OpenAI, to probe public systems for weaknesses.
The smartest crypto minds already read our newsletter. Want in? <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">Join them</a>.

Danfoss says hacked controllers behind 50C French supermarket fridges ran old firmware

Table of Contents

Cryptopolitan_News

Other articles published on Oct 13, 2026

Bumble is in advanced talks to go private in a deal worth about $1 billion, Reuters reported on M...

NEAR Intents see record-breaking month.

Fibank Partners With Bitpanda for Crypto Asset Access

Harneys, dropRWA Plan Tokenized Catastrophe Bonds in 2027

Why Is Beldex (BDX) Price Surging Today? Bridge Risks Explained

Fairshake-Affiliated PAC Spends $2.7M on 2026 House Races

Join our free newsletter for daily crypto updates!