Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

European supermarket fridge attacks spread after October France wave

5 sources · 6 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

After an October France wave, similar fridge-controller attacks hit stores across Europe; hacktivist claims are unverified.

Unknown attackers manipulated internet-exposed supermarket refrigeration controllers, forcing long defrost cycles that spoiled food and, in some cases, started fires. Dark Reading dates the first wave to the night of October 11 and says roughly 700 French stores were hit, with millions of euros in damage. A November wave reached chains including Carrefour, Ahold Delhaize, Spar, SuperValu and Coop in more than ten countries; SecurityWeek counts over 100 stores, while Unit 42 says about 800 supermarkets and medical facilities. Temperatures reached 50°C (122°F). Most outlets say nobody claimed the attacks; Unit 42 says NoName057(16) and Z-Pentest claimed them on Telegram, unverified. CERT-FR urged isolating public-IP systems; many Danfoss units are end-of-life.

Key facts
  • October 11 wave hit roughly 700 French stores, Dark Reading reports.
  • Controllers named: Danfoss AK-SM and AK-SC, Copeland and Dixell XWEB.
  • Copeland XWEB 1.12.1 and earlier vulnerable; update available since August.
  • Censys found over 1,000 exposed Danfoss StoreView interfaces worldwide.
  • Unit 42: over 5,000 exposed devices in France; CISA issued an advisory.
  • British meat suppliers hit; The Record says no meat spoiled there.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 11, 2026Unknown attacker forced long defrost cycles at French stores · Dark Reading
  2. Nov 3, 2026Similar refrigeration attacks reported across multiple European countries · SecurityWeek
  3. Nov 6, 2026Unit 42 says hacktivists claimed the attacks on Telegram · Palo Alto Unit 42

What each outlet adds

beyond the shared facts
  • Dark ReadingOctober 11 date, about 700 French stores, Dixell systems and fire damage
  • SecurityWeekOver 100 stores, Censys count of 1,000 StoreView interfaces, Lupovis activity
  • The RecordXWEB 1.12.1 cutoff, August firmware, British suppliers with no spoilage
  • Palo Alto Unit 42Unverified NoName057(16) and Z-Pentest claims, about 800 sites, CISA advisory
  • CSO OnlineCERT-FR VPN guidance and Spar among affected chains
Vendors
DanfossCopelandDixellPalo Alto Networks
Products
AK-SMAK-SCXWEBrefrigeration systemsStoreViewCarrefourAhold DelhaizeColruyt GroupCoopCopelandXWEB controllers
Threat actors
NoName057(16)Z-Pentest
Victims
supermarketsmedical facilitiesDelhaizeCarrefourColruytSuperValuICAKeskoCoopIKEAEuropean supermarketsmeat suppliers
Organizations
CERT-FRSentinelLABSCISAANSSILupovisAssociation of Independent Meat Suppliers
Countries
FranceEuropean countriesBelgiumEstoniaIrelandLuxembourgNetherlandsSwedenFinlandItalyPortugalGermany

Coverage

oldest first · one row per article · UTC
  1. · 6d ago CSO OnlineFirst report

    European supermarkets hit by identical refrigeration cyberattacks

    Multiple European supermarket chains including Carrefour, Spar and Ahold Delhaize suffered similar attacks on refrigeration systems following a French incident.

  2. · 6d ago SecurityWeek

    Supermarket Fridge Attacks Hit Over 100 European Stores

    Attackers exploit Danfoss and Copeland refrigeration controllers raising unit temperatures to 50°C in multiple countries.

  3. · 5d ago The Record

    Europe-wide fridge attacks hit British meat suppliers

    Hackers exploited vulnerable Copeland XWEB controllers to defrost supermarket refrigeration systems.

  4. · 5d ago Dark Reading

    European supermarket fridges attacked in cold-chain waves

    Smaller attacks hit dozens of stores across seven countries after October wave; food spoilage from switched defrost modes.

  5. · 3d ago Dark Reading

    Freezer-control hacks disrupt about 700 French supermarkets

    An October 11 attack forced long defrost cycles on Danfoss, Dixell and Copeland systems, causing millions of euros in damage.

  6. · 2d ago Palo Alto Unit 42

    Hacktivists claim attacks on European supermarket refrigeration systems

    Hacktivists claimed responsibility for raising refrigeration temperatures to 50°C in hundreds of European supermarkets and medical facilities.