Danfoss Controller Hijacking: Physical Sabotage of French Retail Refrigeration

Key Takeaways

Overnight on October 11–12, 2026, attackers took control of refrigeration management controllers at hundreds of French supermarkets and drove cabinets and cold rooms into defrost, with temperatures reported as high as 50°C [1][3]. Affected chains include Intermarché, Coopérative U, Carrefour Market, Monoprix, and Leclerc, with press estimates of 250 to 350 stores and losses in the tens of millions of euros [1][2][3]. No actor has claimed the attack, and neither French authorities nor Danfoss has publicly stated the initial access vector as of this writing [2][3].

The affected devices are Danfoss AK-SM and AK-SC series supervisory controllers, which maintenance contractors typically manage remotely [3][4]. Danfoss states that most units hit were older products that no longer receive software or security updates [1]. Vulnerabilities disclosed in 2025 for the AK-SM 8xxA family (CVE-2025-41450, CVE-2025-41451, CVE-2025-41452) are plausibly relevant. BleepingComputer assessed that the attack likely leveraged the first two, but no authority or vendor has confirmed that any of them was exploited in this incident [1][2][5].

The observed effects, forced defrost and large-scale food loss with no ransom demand or claim reported so far, are consistent with an attack aimed at physical and economic harm rather than data theft or extortion, though the attacker’s intent has not been established. The exposure that appears to be involved, a vendor-managed OT device reachable from the internet, is widely reported in OT environments [5][6]. Organizations should treat any internet-reachable building, cold-chain, or process controller as a safety-relevant asset and remove or tightly filter that exposure, as described under Immediate Actions below.

Background

Retail refrigeration is managed by supervisory controllers that sit above the individual case and compressor controllers in each store. The Danfoss AK-SM and AK-SC families monitor temperatures, schedule defrost cycles, raise alarms, and expose a web interface so that refrigeration contractors can maintain many sites without travelling to each one [4]. Remote management reduces travel costs for contractors who support dozens or hundreds of stores, but it also means that each controller has a management path from outside the store network, and in many deployments that path is a direct internet exposure.

Per press reporting, CERT-FR published an alert on October 12 describing numerous compromises affecting the AK-SM and AK-SC series and advising that remote access be disconnected or tightly restricted, and reporting attributes similar urgency to French cyber authorities [1][4]. The models involved reportedly include the AK-SM 800 (reported end-of-life in May 2021), the AK-SC 355 (reported phased out in 2016), and some AK-SM 800A units running outdated firmware [1]. Danfoss has said it is in close dialogue with affected customers and that the affected products are older units [1][4]. That position sits alongside press estimates of 250 to 350 affected stores; the two are not directly comparable, since one describes devices and the other counts stores. French authorities have opened an investigation [2].

Internet exposure data indicates that the pool of reachable devices is substantial. BleepingComputer reported 2,752 Danfoss systems exposed online on October 12, 1,590 of them in France, and more than 4,500 Danfoss devices tracked on Shodan [2]. Separately, Claroty’s Team82 had reported roughly 2,765 exposed AK-SM 800A devices in earlier Censys data [5]. These figures come from different scans and methods and should not be read as a precise count of vulnerable systems.

Impact has been reported as possibly extending beyond France, with ANSSI contacting counterparts in Spain, Portugal, Poland, Germany, and Belgium, although spread beyond France is not confirmed in the sources reviewed [1][3]. Les Mousquetaires, which owns Intermarché, reported fresh and frozen display units out of service, and press accounts put nationwide losses in the tens of millions of euros [1][2][3]. Coopérative U’s president described targeting equipment essential to preserving fresh produce as unprecedented [2].

Security Analysis

What Is Confirmed and What Is Not

The confirmed facts are the timing, the affected retailers, the controller families involved, the physical effect (forced defrost and food loss), and the open investigation [1][2][3]. What remains unconfirmed is the initial access method. Reporting that the attackers reached the controllers through internet-exposed maintenance interfaces comes from press accounts and French cyber-agency guidance, and it fits the available evidence, but authorities have not disclosed how access was gained [3]. It is also unknown whether the attacker used a vulnerability, stolen or default credentials, access obtained through a maintenance provider, or a combination. Authorities have not disclosed the initial access vector or an attributed actor, and this note will need revision when CERT-FR or prosecutors publish findings.

The Disclosed Vulnerabilities as a Plausible Path

Public vulnerability research on the AK-SM 800A family provides a credible technical route, and the comparison below is offered as an inference, not a finding. CISA advisory ICSA-25-140-03 covers the AK-SM 8xxA series, and the Danfoss security advisory addresses the authentication issue [5][6][7]. The table summarizes the three CVEs and the firmware release that fixes each.

Chained together, the first two weaknesses would allow an unauthenticated remote party to gain an administrative session and then run operating-system commands on the controller [5][6]. Claroty reported that the authentication mechanism generates a daily password from the device clock, so an attacker who reverse-engineers the algorithm can log in without credentials [5]. CVE-2025-41450 was fixed in R4.2 and CVE-2025-41451 and CVE-2025-41452 in R4.3.1; Danfoss advises upgrading to R4.3.1 or later, which includes all three fixes [5][6][7].

Two cautions apply. First, the reportedly most affected products, the AK-SM 800 and AK-SC 355, are older than the AK-SM 8xxA family and receive no updates, so any weakness in them would be permanent without a replacement [1]. The Hacker News notes that no vulnerability had been explicitly linked to the attack as of October 13, while BleepingComputer assessed that the attack likely leveraged CVE-2025-41450 and CVE-2025-41451; neither assessment is an official finding [1][2]. Second, the timeline should be read carefully. Claroty’s research page is dated August 9, 2026, whereas Danfoss’s advisory dates to March 2025, CISA’s advisory to May 2025, and the R4.3.1 release and CISA update to August 2025 [5][6][7]. The flaws were therefore publicly documented well before this incident.

Why This Incident Matters

Cyberattacks on OT have historically targeted power, water, and industrial processes, and retail food chains have more often faced ransomware that disrupted point-of-sale and logistics systems. Reporting indicates that the attackers drove the controllers into defrost cycles, using normal controller functions, to cause physical harm at scale across multiple unrelated companies at the same time. Because the common point was a device model and a maintenance ecosystem, not any one retailer’s network, individual chains would have had limited ability to see the shared exposure.

Three structural factors plausibly contributed to the scale of the impact. The first is that the controllers can alter physical state, so a software compromise translates directly into spoiled stock. The second is that the devices have long service lives and the vendor has ended support for some of them, which leaves unpatchable systems in production. The third matters if access came through contractor channels, which has not been confirmed: remote maintenance access is typically managed by third-party contractors, whose accounts, VPNs, and exposed web interfaces sit outside the retailer’s security monitoring. Cold-chain sabotage also bears on food safety as well as revenue. If a controller is compromised, the temperature readings it reports can no longer be trusted, which is a risk for stock that remains on shelves; no source reviewed reports that readings were falsified in this incident.

Relevance to AI-Era Risk

This incident does not involve AI, but it bears on the threat landscape that CSA’s AI Safety Initiative tracks. Our earlier work on AI-assisted vulnerability discovery notes that capable models can shorten the time needed to analyze embedded firmware and web interfaces of this kind, which lowers the cost of finding flaws like a date-derived backdoor password in low-profile OT products. That is an inference about trend direction, not a claim about this attack. Defenders may find that obscurity is a weaker protection for niche controllers than it was previously.

Recommendations

Immediate Actions

Organizations that operate Danfoss AK-SM or AK-SC controllers, or any comparable refrigeration or building supervisory controller, should first determine whether those devices are reachable from the internet, including through maintenance contractors’ access paths. Where they are, remove the direct exposure or restrict access to a small set of trusted IP addresses, which is consistent with the CERT-FR advice [1][4]. Check each controller’s temperature setpoints, defrost schedules, user accounts, and configuration for unexpected changes, and treat any unit that shows signs of tampering as compromised. For compromised units, reporting indicates that a factory reset, credential change, account verification, and full reconfiguration are recommended [1]. Contact your maintenance provider to learn which of your stores they can reach remotely and by what method.

For AK-SM 8xxA units, confirm the firmware is R4.3.1 or later [5][6]. Keep manual temperature logging or independent sensor alarms in place at critical sites, so that a compromised controller cannot be the only source of temperature truth.

Short-Term Mitigations

Place building and refrigeration controllers on a segmented network with no inbound internet path, and require contractors to connect through a brokered, multi-factor authenticated remote-access service that logs sessions and can be disabled quickly. Replace any controller for which the vendor has ended security support, or isolate it behind a gateway that enforces an allow-list for its management protocols. Add independent, out-of-band temperature sensors that alert through a path not controlled by the supervisory device. Ask maintenance vendors for evidence of how they secure their own credentials and endpoints, and include these requirements in contracts. CSA’s Zero Trust guidance for critical infrastructure [8] describes the segmentation and access-brokering principles behind these steps.

Strategic Considerations

Retailers and other cold-chain operators should maintain an inventory of OT and building systems that includes vendor support status and remote-access paths, and should treat the end-of-support date as a risk-register event. Procurement should require a published vulnerability-disclosure and patch policy for connected controllers, with defined support periods. Sector bodies and regulators may wish to consider whether food-retail refrigeration warrants the resilience expectations applied to other essential services. Incident response plans should include a physical-consequence scenario, with predefined decisions about stock disposal, food-safety notification, and manual operation.

CSA Resource Alignment

CSA’s Zero Trust Guidance for Critical Infrastructure [8] is the most directly applicable guidance. It applies Zero Trust principles to OT and ICS environments, which supports the recommendations above to remove inbound internet paths, segment controllers, and broker contractor access with strong authentication and session logging.

State of ICS Security in the Age of Cloud [9] examines how connecting industrial control systems to cloud and remote-management services changes their risk, which describes the kind of remote-maintenance model that is plausibly involved here. Its discussion of balancing remote operability against exposure applies to the AK-SM and AK-SC deployments described above. The Cloud Industrial Internet of Things (IIoT) – Industrial Control Systems Security Glossary [10] provides shared terminology for ICS, IIoT, and cloud-connected OT, which is useful when security, facilities, and refrigeration vendors must coordinate on a shared incident.

For control mapping, the AI Controls Matrix (AICM) v1.1 [11] is CSA’s current control framework, and its supply-chain, identity and access management, and threat and vulnerability management domains are relevant to the third-party access and unpatched-asset issues here, even though the incident itself does not involve AI systems.

References

[1] The Hacker News. “Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers.” The Hacker News, October 2026.

[2] BleepingComputer. “Cyberattack shuts down refrigerators at French supermarkets.” BleepingComputer, October 12, 2026.

[3] TIME. “‘Unprecedented’ Cyberattack Targets French Supermarket Fridges.” TIME, October 13, 2026.

[4] NordiskPost. “Hackers exploit a weakness in Danish tech to heat French supermarket fridges.” NordiskPost, October 13, 2026.

[5] Claroty Team82. “Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers.” Claroty, August 9, 2026.

[6] CISA. “Danfoss AK-SM 8xxA Series (ICSA-25-140-03).” CISA ICS Advisories, May 20, 2025 (updated August 26, 2025).

[7] Danfoss. “Improper Authentication vulnerability in Danfoss AK-SM8xxA Series, resulting in an authentication bypass (DSA-2025-03-01).” Danfoss Security Advisories, March 24, 2025.

[8] Cloud Security Alliance. “Zero Trust Guidance for Critical Infrastructure.” CSA, 2025.

[9] Cloud Security Alliance. “State of ICS Security in the Age of Cloud.” CSA ICS Security Working Group, 2024.

[10] Cloud Security Alliance. “Cloud Industrial Internet of Things (IIoT) – Industrial Control Systems Security Glossary.” CSA, 2024.

[11] Cloud Security Alliance. “AI Controls Matrix (AICM) v1.1.” CSA, 2026.