Danfoss (Organization): news timeline & CVEs

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

Hackers exploited unpatched Danfoss fridge controllers, spoiling food at more than 400 European grocery stores.

Attackers remotely manipulated commercial refrigeration controllers at more than 400 French grocery and retail stores, heating units to about 50°C, spoiling food and reportedly causing small fires. Two Alsace supermarkets alone reported about 270,000 euros in losses, and Sekoia said Spain, Portugal, Poland, Germany, and Belgium were also affected. The activity is linked to unpatched Danfoss AK-SM 800A flaws CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452, which Claroty said allow remote code execution or denial of service. Attackers lengthened defrost cycles so the heating resembled routine maintenance; the actor and motive are unknown.

Dark Readingupdated Oct 15, 19:23 UTC · 1d agofirst Oct 15, 07:00 UTC · 1d agoExploit / PoC in the wild 19 sources CVE-2025-41450 CVE-2025-41451 CVE-2025-414521

French Supermarket Cyberattack: Exposed OT Behind France’s Food Supply

SOCRadar reports a French supermarket cyberattack and exposed Danfoss OT behind the food supply.

SOCRadar published an analysis of a cyberattack on French supermarket operations and the operational-technology exposure behind France’s food supply. The article’s sections cover what happened, Danfoss systems and what is known about a related vulnerability, and an exposure snapshot of Danfoss StoreView in France. It also frames the incident as hybrid pressure on French infrastructure and lists recommendations for retail and OT operators. The captured text does not name a specific retailer, CVE, threat actor, or quantified impact.

SOCRadarOct 13, 12:11 UTC · 3d agoData breach1

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

Attackers hijacked Danfoss refrigeration controllers at hundreds of French supermarkets, spoiling frozen stock; Ahold Delhaize separately hit by disruptive incident.

Attackers remotely hijacked Danfoss refrigeration control systems overnight at hundreds of French supermarkets including Intermarché, Netto, Super U, Leclerc, Carrefour Market and Monoprix, warming freezers and destroying chilled/frozen goods with per-store damage of tens to hundreds of thousands of euros. Claroty Team82 disclosed flaws in Danfoss AK-SM 800A and Copeland XWEB Pro web management interfaces in August 2026 that were since patched, but it is unconfirmed whether they were exploited here. Separately, Ahold Delhaize confirmed a security issue disrupting Albert Heijn, Etos, Gall & Gall and Delhaize stores in the Netherlands and Belgium, halting distribution centers and knocking websites and apps offline.

Help Net Securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 16:07 UTC · 4d agoExploit / PoC in the wild 19 sources

Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C

Attackers remotely compromised Danfoss refrigeration controllers in ~150 French supermarkets, setting temperatures to 50°C and causing major food spoilage and financial losses.

French supermarket chains Intermarché, E.Leclerc, and Système U experienced a cyberattack targeting Danfoss refrigeration control systems overnight October 11-12, with attackers remotely setting temperatures to 50°C and triggering continuous defrost cycles across affected stores. Approximately 150 Intermarché stores were impacted, with potential losses reaching hundreds of thousands of euros from spoiled food stock. Coopérative U CEO Dominique Schelcher confirmed criminal activity affected refrigeration production systems. The exact intrusion method, responsible group, and whether a known vulnerability was exploited remain unconfirmed, though older software versions are suspected.

Cyber Security Newsupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 12:54 UTC · 4d agoData breach in the wild 19 sources

Hackers activate automatic defrosting accross European supermarket fridges

Hackers forced Danfoss fridge controls at French supermarkets into continuous defrost, also hitting deliveries and prices.

An ongoing cyberattack has disrupted Danfoss refrigeration controls used by French supermarket chains Intermarché, Leclerc, and Coopérative U, according to La Dépêche and Tom's Hardware. Coopérative U president Dominique Schelcher confirmed Monday morning that refrigeration systems at several stores in the network had been affected since the previous night and called the incident extremely serious. Reports say units were set to defrost continuously at 50 degrees Celsius, while deliveries and electronic shelf-label pricing were also impacted. Teams were mobilized to restore systems and an investigation was promised.

Hacker News · securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 12:16 UTC · 4d agoData breach in the wild 19 sources HN 24↑ · 9 comments

Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

Cyberattack on Danfoss refrigeration software hit French supermarket chains, triggering forced defrosts and spoiling food stock.

A cyber-attack from October 11, 2026 targeted refrigeration installations at multiple French supermarket chains including Coopérative U, Intermarché, E. Leclerc, Carrefour and Monoprix. Attackers reportedly compromised outdated Danfoss refrigeration control software, remotely triggering forced defrost cycles with temperatures up to 50°C. Two stores in Haguenau alone lost €270,000 in merchandise, and roughly 150 Intermarché stores are affected. Danfoss controllers have known critical CVEs (CVE-2023-25915, CVE-2025-41450/41451/41452) and Claroty demonstrated similar attacks at DEF CON 34.

Infosecurity Magazineupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 11:57 UTC · 4d agoData breach in the wild 19 sources CVE-2023-25915 CVE-2025-41450

Danfoss

Timeline6 articles

Related CVEsby mentions

Appears with