Copeland (Vendor): news timeline & CVEs

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit

Attackers compromised exposed Danfoss and Copeland refrigeration controllers, spoiling food at nearly 700 French supermarkets.

Unknown criminals compromised internet-exposed refrigeration controllers and raised temperatures as high as 50°C, spoiling food and sparking fires across nearly 700 French supermarkets. France’s ANSSI said Danfoss controllers were widely compromised and later added Copeland and Dixell systems. Claroty’s Team82 had warned in August of authentication-bypass and OS command-execution flaws in Danfoss AK-SM 800A and Copeland XWEB devices, after earlier CISA advisories. Coalition scanning still found 1,506 exposed Danfoss StoreView panels and 1,119 XWEB login pages, with many remaining online after the attacks.

The Register · SecurityOct 15, 19:23 UTC · 1d agoExploit / PoC in the wild 19 sources2· 1 read

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

ANSSI says the French supermarket refrigeration attack also hit Copeland and Dixell controllers, affecting about 700 stores.

France’s ANSSI said the cyberattack that disrupted supermarket refrigeration this week also compromised Copeland XWEB and Dixell XWEB controllers, after first warning about Danfoss AK-SM and AK-SC systems. Finance Minister Roland Lescure said about 700 of France’s roughly 10,000 supermarkets were affected, including Carrefour, Coopérative U, E.Leclerc, Intermarché, and Monoprix. At some Intermarché stores refrigeration ran at 50 degrees Celsius for six hours and food was discarded; prosecutors said the attack also caused fires. How access was gained is still unclear and has not been linked to flaws Claroty disclosed this summer. CERT-FR urged operators to take the controllers offline, and investigators have reported neither a claim of responsibility nor a ransom demand.

SecurityWeekupdated Oct 15, 19:23 UTC · 1d agofirst Oct 15, 12:50 UTC · 1d agoExploit / PoC in the wild 19 sources

Fridge hack costing millions and sparking fires stemmed from poor security

Poorly secured supermarket refrigeration controllers were mass-hacked, causing fires and huge reported losses across Europe.

Researchers say a mass compromise of poorly secured supermarket refrigeration controllers caused fires and likely cost tens or hundreds of millions of euros. Affected stores reportedly left outdated controllers on the public internet without VPNs, IP allowlists, changed default credentials, or current firmware. Spain, Portugal, Poland, Germany, and Belgium were reportedly affected. Copeland acknowledged a vulnerability in a discontinued end-of-life controller generation, and Danfoss was also cited as referring to discontinued models. The attacker has stayed silent, leaving vandalism or a state-linked disruption among the speculated motives.

Ars Technica · Securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 14, 21:35 UTC · 2d agoData breach in the wild 19 sources

Unplug your smart fridges, French supermarkets warned after cyberattack

Hackers disrupted exposed refrigeration controllers at hundreds of French supermarkets, spoiling chilled food stocks.

A cyberattack on internet-exposed refrigeration controllers ruined chilled and frozen food at hundreds of French supermarkets over the weekend. CERT-FR initially identified Danfoss AK-SC and AK-SM systems, then expanded warnings to Dixell and Copeland equipment, including Dixell’s XWEB interface. Groupement Mousquetaires, operator of Intermarché and Netto, removed products from affected displays. CERT-FR urged stores to disconnect public-facing controllers, use VPNs, update firmware, enforce strict security and replace default passwords.

CSO Onlineupdated Oct 15, 19:23 UTC · 1d agofirst Oct 14, 10:37 UTC · 2d agoExploit / PoC in the wild 19 sources

French Supermarket Cyber-Attack Impacts More Refrigeration Controllers

Attackers altered internet-exposed refrigeration controllers at French supermarkets, spoiling cold storage.

A cyber-attack around October 11 disrupted refrigeration at French supermarkets and appears to extend beyond Danfoss equipment. CERT-FR listed Danfoss AK-SC and AK-SM controllers as well as Dixell and Copeland xweb systems as affected. An E. Leclerc store in Tarn reported disruption despite using Dixell equipment, and Le Monde described a Bordeaux-area supermarket where freezer settings were changed from −22°C to 150°C, with several changes per second. Claroty said many refrigeration controllers are exposed to the internet and that initiating defrost required deliberate action.

Infosecurity Magazineupdated Oct 15, 19:23 UTC · 1d agofirst Oct 14, 09:30 UTC · 2d agoExploit / PoC in the wild 19 sources2

Copeland

Timeline5 articles

Appears with

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

Fridge hack costing millions and sparking fires stemmed from poor security

Unplug your smart fridges, French supermarkets warned after cyberattack

French Supermarket Cyber-Attack Impacts More Refrigeration Controllers