Monoprix (Victim): news timeline & CVEs

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

ANSSI says the French supermarket refrigeration attack also hit Copeland and Dixell controllers, affecting about 700 stores.

France’s ANSSI said the cyberattack that disrupted supermarket refrigeration this week also compromised Copeland XWEB and Dixell XWEB controllers, after first warning about Danfoss AK-SM and AK-SC systems. Finance Minister Roland Lescure said about 700 of France’s roughly 10,000 supermarkets were affected, including Carrefour, Coopérative U, E.Leclerc, Intermarché, and Monoprix. At some Intermarché stores refrigeration ran at 50 degrees Celsius for six hours and food was discarded; prosecutors said the attack also caused fires. How access was gained is still unclear and has not been linked to flaws Claroty disclosed this summer. CERT-FR urged operators to take the controllers offline, and investigators have reported neither a claim of responsibility nor a ransom demand.

SecurityWeekupdated Oct 15, 19:23 UTC · 1d agofirst Oct 15, 12:50 UTC · 1d agoExploit / PoC in the wild 19 sources1

Cyberattacks crank French supermarket refrigeration systems up to 50°C

Cyberattacks pushed French supermarket fridges to 50°C, spoiling food across hundreds of stores.

Cyberattacks on supermarket refrigeration controllers in France reportedly raised temperatures to 50°C (122°F), spoiling food at hundreds of stores and in some cases starting fires. Carrefour, Intermarché (about 150 stores), Monoprix (about 5% of 490 stores), and Coopérative U (80 of 2,000) were among those affected. Danfoss said impacted equipment ran outdated firmware. CERT-FR reported numerous compromises of AK-SM and AK-SC controllers and advised isolating them, resetting, patching, and rotating credentials. Claroty had previously found a predictable date-based admin bypass in the AK-SM 800A, but authorities have not confirmed that flaw was used. Coopérative U said it is not a Danfoss customer. Separately, Ahold Delhaize reported an unlinked cybersecurity incident disrupting Dutch grocery digital services and stock.

The Register · Securityupdated Oct 15, 19:23 UTC · 1d agofirst Oct 13, 12:00 UTC · 3d agoExploit / PoC in the wild 19 sources

Hackers heat up supermarket fridges, spoiling food across France

Attackers tampered with Danfoss refrigeration controllers, spoiling food at French supermarket chains.

Attackers tampered with Danfoss commercial refrigeration controllers used by Intermarché, Netto, Coopérative U, Carrefour, E.Leclerc, and Monoprix, forcing stores across France to discard refrigerated and frozen food. Le Monde reported defrost cycles were extended from one to eight hours; some equipment reportedly reached about 50°C, with damaged gear and fires also reported. Danfoss said most affected units were unsupported legacy AK-SM800 and AK-SC355 systems. Les Mousquetaires estimates several million euros in losses, and the Paris prosecutor’s office has opened an investigation. No attacker has been identified, and no link has been established to a separate Ahold Delhaize network incident.

Malwarebytes Labsupdated Oct 15, 19:23 UTC · 1d agofirst Oct 13, 11:17 UTC · 3d agoExploit / PoC in the wild 19 sources

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Attackers remotely heated Danfoss fridge controllers at hundreds of French supermarkets, spoiling stock and causing tens of millions in losses.

On the night of October 11, attackers remotely controlled Danfoss AK-SM and AK-SC refrigeration controllers at French supermarkets, forcing defrost and heating units to as much as 50°C. Intermarché and Netto reported roughly 150 to 300 stores affected, with Carrefour, Coopérative U, Monoprix, and E.Leclerc also hit; Les Mousquetaires estimated losses in the tens of millions of euros. CERT-FR and ANSSI urged operators to disconnect the controllers or tightly filter access. Danfoss said most units were unsupported AK-SM 800 and AK-SC 355 models, plus some outdated AK-SM 800A firmware, and neither a vulnerability nor an attacker has been named.

The Hacker Newsupdated Oct 15, 19:23 UTC · 1d agofirst Oct 13, 08:48 UTC · 3d agoExploit / PoC in the wild 19 sources2

Cyberattack shuts down refrigerators at French supermarkets

Attackers remotely defrosted refrigerators at 250–350 French supermarkets via Danfoss controllers.

Attackers remotely hijacked older Danfoss refrigeration controllers overnight and used a built-in defrost function to raise refrigerator temperatures at French supermarket chains including Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U. Reports put the impact at 250 to 350 stores, with food waste and financial losses; the Paris prosecutor’s office opened an investigation that also covers reported fires. How the controllers were compromised is unknown. CISA warned in May 2025 about high-severity authentication-bypass CVE-2025-41450 in Danfoss AK-SM 8xxA systems used in food retail, but no evidence yet ties that flaw to this attack.

BleepingComputerupdated Oct 15, 19:23 UTC · 1d agofirst Oct 12, 15:23 UTC · 4d agoExploit / PoC in the wild 19 sources CVE-2025-41450

Monoprix

Timeline5 articles

Related CVEsby mentions

Appears with

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

Cyberattacks crank French supermarket refrigeration systems up to 50°C

Hackers heat up supermarket fridges, spoiling food across France

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Cyberattack shuts down refrigerators at French supermarkets