Critical Check your exposure
Internet-exposed refrigeration controllers at over 700 French supermarkets reportedly tampered with
Forescout ResearchDanfoss, Copeland, Dixell · food retail, refrigeration
What happened. In October 2026, French authorities investigated incidents at more than 700 supermarkets. Temperature and defrost controls were changed, causing food losses. Initial access, exploited flaws and responsible actors remain unconfirmed.
Who is affected. Supermarkets using internet-exposed Danfoss AK-SM and AK-SC, Copeland and Dixell XWEB refrigeration management systems. CERT-FR confirmed these products were involved.
What to do. Check whether any Danfoss AK-SM, AK-SC, Copeland or Dixell XWEB systems are reachable from the internet, and put them behind a firewall or VPN.
Editor's reading
Forasset ownerOT security leadleadership
- Purdue level
- L2
- L1
Why: Refrigeration management systems are supervisory controllers (L2) that change temperature and defrost settings on the refrigeration equipment they manage (L1).
- Are you exposed?
Search your asset inventory and external scans for Danfoss AK-SM, AK-SC, Copeland or Dixell XWEB web interfaces reachable from the internet.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Forescout Research (opens forescout.com)
More on Danfoss Copeland Dixell Food and agriculture