---
title: 'Attackers hijack Danfoss refrigeration controllers, overheating freezers at hundreds of French supermarkets'
url: 'https://www.securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets'
markdown: 'https://www.securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets.md'
date: '2026-10-11'
description: 'Attackers remotely forced Danfoss refrigeration controllers at chains including Intermarché, Coopérative U, Carrefour Market and Monoprix into continuous defrost overnight on October 11 to 12, pushing some units to about 50°C and destroying food stock at roughly 250 to 400 stores. CERT-FR confirmed…'
taxonomy:
  category:
    - Cybersecurity
---

# [Attackers hijack Danfoss refrigeration controllers, overheating freezers at hundreds of French supermarkets](https://www.securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets)

   11th Oct 2026  

Attackers remotely forced Danfoss refrigeration controllers at chains including Intermarché, Coopérative U, Carrefour Market and Monoprix into continuous defrost overnight on October 11 to 12, pushing some units to about 50°C and destroying food stock at roughly 250 to 400 stores. CERT-FR confirmed compromises of Danfoss AK-SM and AK-SC controllers; Danfoss says many affected units are legacy models no longer receiving updates. French prosecutors have opened an investigation. No data theft has been reported, so this is a Cybersecurity item, not a Breach.

Update, October 15: the attack has widened beyond Danfoss. CERT-FR updated its alert on October 13 to include Copeland XWEB and Dixell XWEB refrigeration controllers alongside the Danfoss models, and Copeland has since acknowledged a vulnerability and says it is working with impacted customers. France's finance minister put the number of affected supermarkets at about 700 of roughly 10,000 nationwide, up from the 300 to 350 reported earlier, with Carrefour, Coopérative U, E.Leclerc, Intermarché and Monoprix all confirmed affected. CERT-FR urges operators to take the controllers off the public internet and restore remote access only through a secure VPN or other protected network, and warns that a factory reset alone is not enough for compromised end-of-life devices.

Sources: [BleepingComputer](https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/); [Cybernews](https://cybernews.com/security/danfoss-refrigeration-hack-france-supermarkets/); [SecurityWeek](https://www.securityweek.com/supermarket-refrigeration-attack-widens-to-copeland-dixell-controllers/); [Reuters](https://www.reuters.com/legal/litigation/french-supermarkets-cyber-insurance-unlikely-cover-food-losses-insurers-say-2026-10-15/)

---

## Navigation

- Parent: [News](https://www.securteksecurity.com/news.md)
- Previous: [Czech NÚKIB warns Russian actors are phishing Signal users through linked devices](https://www.securteksecurity.com/news/czech-nukib-warns-signal-linked-device-phishing.md)
- Next: [Decision models go mainstream: TypeSafe raises $870M, Microsoft ships Decision-1](https://www.securteksecurity.com/news/decision-models-go-mainstream-typesafe-raises-870m-microsoft-ships-decision-1.md)