Refrigeration Cyberattacks 2026

A campaign of remote attacks on internet-exposed commercial refrigeration controllers ran through 2026: Israeli food businesses (March and May), US military commissaries (August), French supermarkets (the night of October 11–12), and a second European wave (November 1–2). In each case attackers manipulated the supervisory controllers that manage freezers and cold rooms — forcing defrost cycles, raising setpoints as high as 50°C — spoiling stock, in France igniting fires and sprinklers, and in one Israeli plant destroying compressors outright. No attribution has been confirmed for the European supermarket attacks; the earlier incidents are linked by investigators to Iranian-aligned actors, at low confidence for the US bases.¹

Timeline

• March 2026 — a small kosher grocery chain in Israel shows spoiled frozen goods in a social-media video; the earliest incident publicly visible.²
• May 2026 — an Israeli food production plant: printers spew threatening messages, wiper code hits corporate computers, and engineers find broken compressors and spoiled food. Responders (the firm Profero) describe attackers who adjusted safety limits, opened gas pressure valves, changed credentials, disabled alerts, and destroyed forensic evidence overnight; operations halted over a week pending parts.
• August 2026 — “possible refrigeration disruption” (the Pentagon’s wording) at multiple US Defense Commissary Agency stores; at least six bases reported freezers going into defrost mode overnight, among them Fort Huachuca, Fort Irwin, Travis AFB, F.E. Warren AFB, Naval Station Newport, and Columbus AFB. The Pentagon has not publicly attributed; investigators from the Defense Criminal Investigative Service, Army CID’s Cyber Field Office, and French law enforcement are working the cases, and former officials say evidence points toward Iran without high confidence.
• October 11–12, 2026 — French supermarkets: controllers at several hundred stores (Intermarché, Coopérative U, Carrefour, Monoprix and others) forced into continuous defrost with setpoints raised toward 50°C; stock lost at scale, tens of millions of euros in damages, some units igniting. ANSSI warned of widespread Danfoss compromises the next day and added Copeland and its Dixell brand a day later; a Paris prosecutor is investigating.
• November 1–2, 2026 — a second wave across at least six more countries: Belgium (roughly 40 Delhaize stores plus sites in Luxembourg), Sweden (ICA, Coop), Ireland (SuperValu/Musgrave), Estonia, and the Netherlands, with IKEA among the named targets. Sweden and Estonia reported lighter impact than France, having heeded its warnings.³
• November 2, 2026 — a refrigeration-equipment supplier to the French Blood Establishment (EFS) is compromised, altering temperature and defrost thresholds at three EFS cold-storage sites. EFS says its alarms identified the anomalies quickly; staff secured or transferred the plasma and biological samples, with no health impact or loss of blood products. EFS was not directly targeted, and its technical teams worked with ANSSI and the Health Ministry.⁴

The controllers and their vulnerabilities

The equipment at the center of the French incidents is the Danfoss ADAP-KOOL family of store-level system managers (AK-SM 800 and 800A, AK-SC 355) plus Copeland XWEB and Dixell XWEB supervisory controllers — the layer that schedules defrosts, holds setpoints, and raises alarms for an entire site. CISA advisory ICSA-25-140-03 documents three flaws in the Danfoss AK-SM 8xxA series reported by Tomer Goldschmidt of Claroty Team82:⁵

• CVE-2025-41450 — improper authentication from datetime-based password generation: the controller accepts a support password derived from the device’s current date and time, bypassing configured credentials. Fixed in firmware R4.2 (March 2025).
• CVE-2025-41451 — OS command injection through alarm-to-mail configuration fields, giving post-authentication remote code execution. Fixed in R4.3.1 (August 2025).
• CVE-2025-41452 — post-authentication control of web-interface configuration settings, denial of service. Fixed in R4.3.1.

The datetime password is a designed-in secret predictable to anyone who knows the algorithm — the same failure class as weak-entropy key generation in coldcard-entropy-incident-2026, and the opposite of the deliberate-unpredictability discipline in nothing-up-my-sleeve-numbers. Copeland’s XWEB line had carried roughly two dozen CISA-cataloged CVEs since February 2026, and Team82 published research in August 2026 warning attackers could “freeze the controller” and “defrost the food.”

Why the fixes did not land

The French attacks came two months after Team82’s publication and Danfoss’s R4.3.1 fix. Insurance-provider Coalition’s internet scans found 1,506 Danfoss StoreView admin panels publicly exposed between September 7 and October 6 (820 on French networks), and at least 2,624 refrigeration controllers from the named brands with login pages open to the internet; 618 Danfoss devices were still online after the attacks. Part of the fleet cannot be patched at all: AK-SM 800 units were declared end-of-life in 2021 and AK-SC 355s phased out in 2016, US commissary contracting documents show mid-2000s Danfoss controllers no longer receiving secure software, and Copeland acknowledged the flaw sits in “a discontinued, end-of-life generation of controllers.”⁶

None of these sources establishes which vector the attackers actually used; the confirmed picture is narrower — internet-reachable supervisory controllers were manipulated through their ordinary control functions. That gap between published fix and exploited device is the same lifecycle failure the us-cyber-trust-mark registry makes visible for consumer gear through its support-period disclosure, and the segmentation-and-patch discipline iec-62443 prescribes for industrial control systems.

Response and open questions

Danfoss has advised customers to install current firmware, remove the controllers from the internet, and place them behind a firewall and VPN. On November 5, CISA, FBI, HHS, USDA, and DOT issued a joint fact sheet confirming malicious activity against industrial refrigeration and cold-chain monitoring globally. It names authentication bypass, arbitrary code injection, and weak configurations as possible vectors, and adds denial-of-view — loss of visibility into current temperatures — to the physical-effects list. Its mitigations match the incident’s exposed lifecycle: remove public internet exposure, isolate OT on a dedicated VLAN, enforce credential security, patch and retire end-of-life devices, allowlist devices and IP addresses, maintain offline backups, review logs or network traffic, and enforce safe downstream setpoint ranges with deviation alerts. The advisory establishes the ongoing threat and the recommended defenses, not the attackers’ identity or the vector used in any particular incident.⁷

The Operational Technology Cybersecurity Coalition (whose members include Claroty, Forescout, Honeywell, and Schneider Electric) responded to the French attacks by renewing its call for CISA to issue a Binding Operational Directive on federal OT and for the USDA to push baseline practices in food and agriculture. Attribution stays open: Profero’s Omri Segev Moyal attributes the Israeli incidents to the Iranian-linked group Cyber Isnaad Front based on forensic data and the perpetrators’ own claims — the group previously ran influence operations targeting the 2024 US elections — while the commissary evidence pointing to Iran is held at low confidence and the European attacks remain unclaimed. Moyal also assessed the May attack’s configuration exploration as machine-speed (“It wasn’t human, the amount of configurations they were able to try in a short time span”), an observer’s judgment rather than demonstrated tooling, though it is the kind of question agentic-offensive-techniques now poses for every incident.⁸⁹

Related

• iec-62443 — the IACS security standard family whose zones/conduits and patch-management expectations this fleet violates
• us-cyber-trust-mark — the consumer-labeling response to the same end-of-support exposure, with industrial scope explicitly excluded
• cyber-losses-vs-ai-capabilities — a physical-damage event with named loss totals, relevant to the debate over whether aggregate cyber losses are moving
• agentic-offensive-techniques — the open question of AI-assisted exploration in intrusion tradecraft
• coldcard-entropy-incident-2026 — predictable secrets from weak or designed-down entropy
• nothing-up-my-sleeve-numbers — why cryptographic secrets must be deliberately unpredictable

Sources

• Jenna McLaughlin (NPR) 2026 — A new cold war: hackers target fridges across the globe
• CISA 2025 — Danfoss AK-SM 8xxA Series (Update A)
• 2026 — Researchers warned attackers could ‘defrost the food’ months before French supermarkets got hit
• CISA, FBI, HHS, USDA, and DOT 2026 — US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
• Établissement français du sang 2026 — L’EFS confirme l’incident de cybersécurité impactant un de ces prestataires d’équipement frigorifique

Footnotes

1. Jenna McLaughlin (NPR) 2026 — A new cold war: hackers target fridges across the globe ↩

2. Jenna McLaughlin (NPR) 2026 — A new cold war: hackers target fridges across the globe ↩

3. Jenna McLaughlin (NPR) 2026 — A new cold war: hackers target fridges across the globe ↩

4. Établissement français du sang 2026 — L’EFS confirme l’incident de cybersécurité impactant un de ces prestataires d’équipement frigorifique ↩

5. CISA 2025 — Danfoss AK-SM 8xxA Series (Update A) ↩

6. 2026 — Researchers warned attackers could ‘defrost the food’ months before French supermarkets got hit ↩

7. CISA, FBI, HHS, USDA, and DOT 2026 — US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems ↩

8. Jenna McLaughlin (NPR) 2026 — A new cold war: hackers target fridges across the globe ↩

9. 2026 — Researchers warned attackers could ‘defrost the food’ months before French supermarkets got hit ↩