Cyberattack on Danfoss Controllers Hits French Supermarkets

On the night of October 11 to 12, 2026, an unprecedented cyberattack compromised refrigeration systems across hundreds of French supermarkets, remotely hijacking commercial temperature controllers manufactured by Danish industrial engineering firm Danfoss. Major supermarket networks, including Intermarché, Netto, Coopérative U, Carrefour, and E.Leclerc, reported that external actors breached internet-exposed control panels and overrode routine operating cycles. The attackers forced cooling cabinets and cold-storage rooms into continuous defrost mode, driving temperatures up to 50 degrees Celsius (122 degrees Fahrenheit) for approximately six hours while suppressing standard telemetry alarms. The Paris prosecutor's cybercrime unit and the French National Cybersecurity Agency (ANSSI) launched investigations after the incident affected an estimated 400 to 700 retail locations, spoiled tens of millions of euros worth of perishable inventory, and triggered localized electrical fires and sprinkler activations. Danfoss stated that the majority of affected units were legacy controllers, specifically models from the AK-SM and AK-SC series such as the AK-SM800 and AK-SC355, which no longer receive regular software or security updates.

Regulatory Scrutiny and Cold-Chain Compliance in the EU

The scale of the French retail disruption has immediate consequences for commercial facilities across the European Union, including Slovenia. Under EU NIS2 cybersecurity guidelines and strict hygiene regulations governing food preservation, automated cold chains can no longer treat heating, ventilation, and air conditioning (HVAC) controllers as isolated maintenance utilities.

For commercial operators and logistics hubs, leaving digital controller interfaces exposed to the public internet without encrypted tunnels or multi-factor authentication now poses significant compliance and insurance liabilities. Supermarket chains and cold-storage warehouses throughout Central Europe are auditing their operational technology networks to verify that remote facility management systems are segregated from primary corporate networks and completely shielded from external search scanners.

Thermal Fatigue, Component Failure, and Repair Realities

Beyond inventory destruction, forcing refrigeration cabinets to 50 degrees Celsius for extended durations inflicts severe mechanical and electrical trauma on cooling equipment. Defrost heating elements, engineered to cycle intermittently for 20 to 45 minutes to clear evaporator frost, suffered intense thermal stress during the sustained six-hour activation. This continuous heat load degrades surrounding wire insulation, scorches terminal blocks, and warps internal sensor brackets.

Furthermore, when control logic demands immediate sub-zero pull-down following prolonged extreme heat, compressors face critical head pressures and thermal shocks. Oil breakdown inside hermetic compressor pumps accelerates, leading to premature valve failure and motor winding burnout. In the repair sector, restoring these systems requires replacing damaged defrost limit switches, replacing scorched relay control boards, and re-soldering compromised PCB pathways.

For facilities managing commercial appliances and smart domestic white goods subjected to electrical or thermal faults, professional diagnostics remain essential before replacing entire modular assemblies. Electronics service providers such as KRON IT, d.o.o. handle component-level diagnosis and board repairs at dedicated service centres in Ljubljana and Maribor. Working under ISO 9001 quality management and ISO 14001 environmental standards, repairs are executed using OEM-grade components and carry a 12-month warranty on labour, with initial diagnostics priced at 30 € including VAT.

Practical Recommendations for Device Operators

Preventing physical hardware damage through digital entry points requires disciplined maintenance:

• Isolate networks immediately: Disconnect refrigeration controllers, commercial HVAC panels, and smart domestic appliances from direct internet access. Place all remote management interfaces behind a virtual private network (VPN) or a dedicated VLAN with strict firewall filtering.
• Audit legacy firmware: Devices that have reached end-of-life status and no longer receive vendor patches must either be isolated from all external routing or phased out in favor of supported platforms.
• Install redundant analogue fail-safes: Digital controllers should never have unchecked physical authority. Independent thermal cutoffs (bimetallic switches) must be installed directly on defrost heater circuits to break power mechanically if cabinet temperatures exceed 15 degrees Celsius.
• Hardware logistics and lifecycle management: When controller boards or connected equipment exhibit software corruption or hardware burnout, operators can utilize structured mail-in service pathways. KRON IT provides nationwide mail-in repair support with free loaner equipment for eligible devices, ensuring continuous business continuity while original electronics undergo testing and component restoration.
• Decommissioning older equipment: When retired legacy controllers are replaced, ensure all memory chips, network credentials, and proprietary configurations are wiped in accordance with waste electrical and electronic equipment (WEEE) regulations.

Sources

• thehackernews.com
• redteampartner.com
• reddit.com
• time.com