Jump to content

User:Louis/Refrigeration cyberattacks 2026

From Consumer Rights Wiki

On the night of October 11 to 12, 2026, hackers remotely turned up fridge & freezer temperatures in French supermarkets,[1][2] & France's finance minister said about 700 supermarkets were affected;[3] on November 2 chains in at least seven more European countries said temperatures in some of their shops soared overnight,[4] forcing some retailers to throw food away.[5] On November 2, after a cybersecurity incident at its refrigeration equipment provider, the temperature thresholds of cold rooms at three sites of France's public blood service were raised to high temperatures; no blood products were lost, the service said.[6]

In the United States, the Pentagon is treating late-August freezer failures that spoiled food at military commissaries, the on-base stores where military personnel buy their food, as a suspected hack, according to four officials,[7] & a joint investigation is under way.[8] In South Korea, a September 22 software update shut down cooling in Samsung Bespoke AI refrigerators;[9][10] Samsung said the problem occurred after an internal testing file was mistakenly distributed;[11] repair costs would be covered free of charge[11] & compensation for spoiled food was under review.[12]

Incident timeline

[edit | edit source]
Date Place What was hit Controller or vendor Status Losses as reported Source
2022, at the start of the Russian invasion of Ukraine[13][14] Russia[13] 16 supermarkets, which Danfoss said "were targeted by cyberattacks"[13] Danfoss AK SM 800[13] Attack reported by Danfoss[13] [13][14]
2022[13] Israel[13] 40 stores, which Danfoss said "were hacked"[13] Danfoss AK SM 800[13] Attack reported by Danfoss[13] [13][14]
May, reported August 5, 2026[15] Israel[16] A food production plant[15] Attack (trade press)[15][16] Three compressors destroyed & carbon dioxide (CO2) vented[15]; engineers spent most of a week rebuilding the refrigeration system[16] [15][16]
Late August 2026[17][7] United States: Fort Irwin, F.E. Warren Air Force Base, Fort Huachuca, Naval Station Newport, Columbus Air Force Base & Travis Air Force Base[17] At least six military commissaries[17] Suspected; under investigation[7][8] Thousands of dollars' worth of meat, dairy, produce & frozen foods thrown out[17] [17][7][8]
September 22, the day before Samsung's September 23, 2026 notice[9][18] South Korea[10] Samsung Bespoke AI refrigerators[10] Samsung refrigerator software update[11] Software update failure[11] Customers' food that spoiled due to the malfunction[11]; Samsung said repairs would be free of charge & compensation for spoiled food was under review[11][12] [9][11][10]
Reported September 30, 2026[19] Germany & England: Ramstein, Vogelweh, Grafenwoehr & Lakenheath[19] Some coolers at four commissaries[19] Equipment failures from routine wear, per the Defense Commissary Agency[19] [19]
Night of October 11 to 12, 2026[1] France[3] About 700 of France's 10,000 supermarkets, per Finance Minister Roland Lescure[3] Danfoss AK-SM & AK-SC series, Copeland xweb & Dixell xweb remote controllers[20] Attack[3][1] Tens of millions of euros nationally for a single morning of crisis management, forecast by Thierry Cotillard, head of supermarket group Les Mousquetaires[1]; 270,000 euros at two retailers in Haguenau, by their own estimate[21] [1][3][20][21]
Overnight into November 2, 2026[4][5]; more reports on November 3[22] Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands & Sweden[4]; Italy & Portugal, per Euronews[5]; Germany, Greece & Italy on November 3[22]; the United Kingdom[23] Supermarkets & food businesses[22], including more than 50 stores in Belgium[14]; refrigerators in three UK abattoirs[23] An older Danfoss system in Estonia, per a contractor; Copeland equipment in Belgium, per Dutch broadcaster NOS[14] Attack[4] About 15,000 euros of meat, as estimated by Luc De Laet, owner of Belgian butchery chain De Laet & Van Haver[24]; around 100,000 euros of food thrown away in Belgium, per Euronews[25] [4][5][22][23][14][24][25]
November 2, 2026[6] France[6] Cold-room controls at three sites of the Établissement français du sang (EFS)[6] A refrigeration equipment provider[6], named by French weekly Le Canard enchaîné as Coolworld[26] Attack on a provider[6][26] No loss of blood products, per EFS[6] [6][26]

French supermarkets in October 2026

[edit | edit source]
Main article: User:Louis/French supermarket refrigeration controller cyberattack (2026)

A cyberattack hit 300 Intermarché & Netto stores on the night of Sunday October 11 to Monday October 12, 2026.[1] On Tuesday, October 13, Finance Minister Roland Lescure told Parliament that about 700 of the country's 10,000 supermarkets were affected.[3]

Hackers remotely overrode the temperature settings on thousands of freezers, fridges & chiller cabinets, pushing them from as low as -27C to well over 50C; over the next four to six hours the food inside first defrosted, then slowly began to cook, British newspaper The Guardian reported.[2]

CERT-FR, the French national computer emergency response team, whose website is published by France's government cybersecurity agency, the Agence nationale de la sécurité des systèmes d'information (ANSSI), issued alert CERTFR-2026-ALE-012 on October 12 & last updated it on October 16.[20] The alert said CERT-FR knew of numerous compromises of remote controllers for refrigeration installations in the AK-SM series of refrigeration equipment maker Danfoss, the Danfoss AK-SC series, xweb from cooling equipment maker Copeland & Dixell xweb.[20] These controllers are the "central management units that control temperatures, defrost cycles and alarms for every chiller and freezer" in a store.[25]

Thierry Cotillard, head of Les Mousquetaires, the group behind the Intermarché & Netto stores, forecast on French television channel BFMTV that the cost would run to tens of millions of euros nationally for a single morning of crisis management.[1] In Haguenau alone, two retail chains put their losses at 270,000 euros.[21]

European supermarkets in November 2026

[edit | edit source]
Main article: User:Louis/European supermarket refrigeration cyberattacks (November 2026)

Retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands & Sweden reported problems with their refrigeration systems on Monday, November 2, 2026, & several companies confirmed they had been hacked.[4] European news channel Euronews also listed supermarkets in Italy & Portugal among those whose refrigeration problems forced some retailers to discard food after temperatures rose overnight.[5] Germany, Greece & Italy reported incidents on Tuesday, November 3, in what Turkish news agency Anadolu Agency described as suspected cyberattacks targeting refrigeration systems.[22] In the UK, the Association of Independent Meat Suppliers confirmed that refrigerators in three abattoirs had been caught as "collateral damage"; its spokesperson said the fridges were empty at the time & no meat had been lost.[23]

More than 50 stores had been identified in Belgium, cybersecurity news site The Record reported.[14]

Luc De Laet, owner of Belgian butchery chain De Laet & Van Haver, estimated the incident ruined about €15,000 ($16,800) worth of meat.[24] Stores in Belgium threw away around €100,000 worth of food, Euronews reported.[25]

Blood service cold rooms in France

[edit | edit source]
Main article: User:Louis/French Blood Establishment cold-room cyberattack (2026)

On November 2, 2026, a refrigeration equipment provider of the Établissement français du sang (EFS), France's public blood service, was hit by a cybersecurity incident that reached the installations supervising & controlling cold rooms at three EFS sites.[6] The EFS said it was not directly targeted, but temperature & defrost thresholds on cold rooms fitted with the provider's system were raised to high temperatures.[6] It reported that no health impact had been identified & that no blood products had been lost; the plasma bags in the affected equipment, meant for transfusion & for making medicines, were moved or secured.[6]

French weekly Le Canard enchaîné named the provider as Coolworld & reported that the cold rooms, where donor samples are kept at minus 30 °C, had been programmed to reach 110 °C.[26]

US military commissary freezer failures

[edit | edit source]

At least six commissaries confirmed refrigeration outages, forcing the grocery stores to throw out thousands of dollars' worth of meat, dairy, produce & frozen foods, US military newspaper Stars and Stripes reported on August 28, 2026.[17] The stores confirmed to be affected, according to announcements made online by each installation, included Fort Irwin, Calif., F.E. Warren Air Force Base, Wyo., Fort Huachuca, Ariz., Naval Station Newport, R.I., Columbus Air Force Base, Miss., & Travis Air Force Base, Calif.[17]

Stars and Stripes reported on September 1, 2026 that unverified sources had suggested the outages affected up to a dozen stores, while the Defense Department had released nothing beyond an acknowledgment of a "possible refrigeration disruption".[27]

On September 1, 2026, the Cyber Field Office of the Army Criminal Investigation Division (CID) & the Air Force Office of Special Investigations confirmed active investigations into the outages.[27] A Defense Department official said on October 29 that the department is "aware of speculation regarding a potential cyber incident".[8] The Defense Criminal Investigative Service (DCIS), the criminal investigative arm of the Department of Defense Office of Inspector General, is leading a joint investigation, the official said.[8]

News agency Reuters reported on October 29, 2026 that the Pentagon is treating the August freezer malfunctions "as a suspected hack, according to four officials familiar with the matter", & said it could not determine how far the investigation had gone or whether it had reached any conclusions about what happened or who might be responsible.[7] The Pentagon had not publicly confirmed that hackers were responsible, military news site Task & Purpose reported.[8]

Army Criminal Investigation Division spokesman Thomas Hamilton said CID is also working with DCIS & French law enforcement "in understanding the refrigeration outages in Europe".[8]

Fort Huachuca's Facebook account explained on August 26 that its freezer "went into defrost mode where it heated up all the food".[7] The Arizona base described its commissary incident as an "overnight equipment failure" & wrote that "ALL frozen food has spoiled".[28]

The Defense Commissary Agency's contract request for refrigeration included requirements for a vendor to provide monitoring-and-control systems that could be monitored remotely, & according to the contract, the contractor would maintain a master control system located within the United States.[17] Stars and Stripes reported:

Maggie Bullard-Marshall, COO for Aldevra, said they have not sold many refrigerators to commissaries through this contract and that they have not received any service calls about them this week. The company has received requests for purchases this week. The provided refrigerators don’t connect to a network, but there are systems that can be added for remote monitoring, she said.

[17]

In Europe, some coolers at four stores in Germany & England were out of service due to ongoing repairs & maintenance, according to the Defense Commissary Agency, Stars and Stripes reported on September 30, 2026.[19] Three were in Germany (Ramstein Air Base, Vogelweh in Kaiserslautern & Grafenwoehr in Bavaria), & the fourth was Lakenheath in the United Kingdom.[19] Agency spokesman Jefferson Wolfe said the out-of-order units were unrelated to outages that may have affected up to a dozen stores in the United States in late August.[19] Of the European failures, Wolfe said: "The failures stem from routine wear on heavy-use equipment and manufacturer delays for specialized parts".[19]

Earlier attacks in Russia and Israel

[edit | edit source]

Danfoss cited two 2022 attacks on stores using its controllers in its Tech Insider newsletter of October 31, 2025.[13][14] In Russia, 16 supermarkets using its AK SM 800 system manager "were targeted by cyberattacks at the start of the war",[13] a campaign that The Record placed at the start of the Russian invasion of Ukraine.[14] In Israel, "Forty stores were hacked", Danfoss wrote; all of them used the AK SM 800 & lacked proper firewall or virtual private network (VPN) protection.[13] The US Cybersecurity and Infrastructure Security Agency (CISA) recommends VPNs as a more secure method when remote access is required, while noting that VPNs may have vulnerabilities.[29]

In May, refrigeration engineers were called to an Israeli food production plant when temperatures were seen to be rising in its cold rooms & freezers, cooling-industry news site Cooling Post reported in August 2026.[15] On the older of two refrigeration systems there, both using CO2 as their refrigerant, attackers altered the target temperature from 2 degrees Celsius to 50 C, investigators said, according to security news site BankInfoSecurity.[30] On the newer system, the motorized valves holding gas pressure in the gas cooler & receiver were switched to manual mode & pinned permanently open, so the relief valves vented the CO2 to the atmosphere, & three compressors were destroyed.[15] "No malware ran on the controllers", Cooling Post wrote.[15] Engineers spent most of a week rebuilding the system, according to security news site Help Net Security, which reported the case as one of roughly 40 in the quarterly roundup of attacks on industrial organizations covering the second quarter of 2026 by Kaspersky ICS CERT, a research team at security company Kaspersky.[16]

Home smart refrigerators

[edit | edit source]

Samsung Bespoke AI update failure

[edit | edit source]
Main article: Samsung Bespoke AI refrigerator update failure

An accidental software update sent through SmartThings, Samsung's smart home platform,[11] pushed "internal test code" to Samsung Bespoke AI refrigerators in South Korea, "shutting down cooling and screen functions".[10]

Samsung's notice on its Samsung Members forum, posted by a moderator on September 23, 2026, says an error occurred the day before during testing of a refrigerator software update and directs affected owners to its service center.[9]

In a notice posted on its Samsung Members forum on September 23, 2026, Samsung said an error had occurred the day before, September 22, during the testing process for a refrigerator software update.[9] Samsung Electronics said the problem was not caused by a defect in the refrigerators themselves or a systemwide outage of the SmartThings platform.[11]

Samsung stopped distributing the update immediately after recognizing the error & planned to deploy an emergency response team with the goal of completing recovery by September 24 at the latest.[12]

Gmail login flaw in a Samsung smart fridge

[edit | edit source]

Pen Test Partners, a UK-based security consultancy, found a potential way to steal users' Gmail credentials from a Samsung smart fridge, the RF28HMELBSR, during a hacking challenge at the DEF CON hacking conference, technology news site The Register reported on August 24, 2015.[31] Samsung had implemented Secure Sockets Layer (SSL) on the fridge, but the fridge failed to validate the certificates that come as part of the SSL protocol.[32][33] Pen Test Partners wrote that this enabled man-in-the-middle attacks against most of the fridge's connections, including those made to Google's servers to download Gmail calendar information for the on-screen display.[33] In a man-in-the-middle attack, a hacker intercepts a piece of data as it passes between a server & the device.[32]

The firm wrote that an attacker could target "the victim’s fridge from next door, or on the road outside" & "potentially steal their Google credentials".[33] Samsung contacted The Register to say it was looking into the matter: "We are investigating into this matter as quickly as possible."[31]

Controllers reachable from the internet

[edit | edit source]

Remote access for refrigeration contractors

[edit | edit source]

ANSSI director general Vincent Strubel testified before the foreign affairs and defense committee of the French Senate on October 21, 2026 that, according to the agency's current analysis, the vulnerabilities that security researchers had made public over the previous two years were not the ones exploited.[34] Strubel described what was exploited instead, according to the Senate's record of the hearing:

Il s'agit de défauts de sécurisation élémentaires, à commencer par l'exposition directe sur Internet d'équipements frigorifiques et leur administration sans sécurisation particulière, des mots de passe faibles, ce genre d'éléments.

[34] He was describing basic security failings, starting with refrigeration equipment exposed directly on the internet & administered without particular protection, weak passwords, & things of that kind.[34] Since 2014, he said, ANSSI has published & updated a guide to securing industrial systems whose first recommendation is not to expose them directly on the internet.[34] ANSSI currently has no power to compel supermarkets over how they deploy their fridges, he added.[34]

SentinelLABS, the research team of security company SentinelOne, wrote on November 3, 2026 that ANSSI's assessment covers the French cases & that it is not yet known whether the same access path applies to the November 2–3 incidents or to the US commissaries.[35]

Dominique Schelcher, head of Coopérative U, wrote on X that the chain's refrigeration installations are connected to the internet so temperatures can be monitored remotely, day & night, & action taken quickly when there is an anomaly.[36] On radio station RTL on October 13, he said U stores are customers of refrigeration contractors who provide them with a Danfoss system.[36] Danfoss says connecting refrigeration controls to the internet typically cuts unnecessary engineer callouts by 15 to 30% because faults can be fixed remotely, according to Euronews.[25]

Security firm Forescout wrote on October 22, 2026 that installation documentation for the Danfoss AK-SM 800 describes "configuring routers to accept incoming connections".[37] Unless responsibilities are explicitly assigned, Forescout wrote, no single party may have complete visibility into the exposed service, the network path, the contractors' identities & the controller's lifecycle.[37]

CERT-FR's alert said that exposing a management interface on the internet is, in general, contrary to good practice.[20] It recommended removing internet exposure from the affected units & from every unit exposed on a public IP address, then restoring access only through a secured VPN or a protected network.[20] In an emergency, the alert said, filtering the source IP addresses of refrigeration contractors on a firewall is possible, but that fix should not be treated as lasting.[20] It also recommended checking the insurance contract's conditions before cutting off the internet data feed to the refrigeration contractor.[20]

Counts of exposed controllers

[edit | edit source]

Every week, internet-scanning company IPinfo connects to IPv4 addresses, "the most common type of Internet address", on "the usual ports that websites use (the numbered doors a computer answers on)" & records what answers; it counts addresses & treats its counts as a minimum.[38] Censys, another internet-scanning company,[38] counts hosts, while search engine Shodan counts service banners, so one device answering on several ports counts more than once.[39]

In IPinfo's sweep of October 6 & 7, 2026, five days before the French attack, 2,528 addresses showed a Danfoss StoreView dashboard, the web admin panel that stores & technicians use to watch & manage these controllers.[38] France had 1,331 of them, against 1,197 in the other 72 countries & territories put together.[38] Of the 1,331 French dashboards, 1,019 had been open at the same address on March 30, six months earlier.[38] IPinfo wrote that being able to open a dashboard from the internet does not mean anyone can break in through it.[38]

Censys reported on November 5, 2026 that observed global exposure of internet-connected controllers in the two product families named in CERT-FR's alert, Danfoss StoreView & Copeland/Dixell XWEB, fell 53%, from 6,695 to 3,124 distinct hosts, between October 9 & November 5, 2026.[40] Danfoss StoreView exposure dropped 76%, from 3,004 to 708 hosts, & Copeland/Dixell XWEB exposure dropped 35%, from 3,708 to 2,420.[40] Censys wrote that its data does not show why the controllers went offline; a fall in exposure is consistent with provider action or owners disconnecting devices.[40]

End-of-life controllers without security updates

[edit | edit source]

Danfoss told cooling-industry news site Cooling Post that the majority of units affected in France were legacy products or current products running outdated firmware, the software built into the controller.[41][38] Those affected, it said, were its AK-SM800, officially declared end-of-life in 2021, & its AK-SC355 systems, phased out in 2016, which no longer receive software or security updates.[41] The current AK-SM800A systems affected were running outdated firmware.[41]

In a technical newsletter dated October 31, 2025, Danfoss put the AK SM 800's end of life in May 2021 & said that, driven by recent European cybersecurity legislation, it was enforcing a hard end-of-service policy for legacy products that had already reached end of life.[13] Continuing to service them, it wrote, "would place Danfoss under new legal obligations to maintain security updates".[13] In a statement reported by The Record, Copeland acknowledged "the vulnerability identified in a discontinued, end-of-life generation of controllers".[42]

CERT-FR warned that keeping an end-of-life device without security fixes exposed to the internet exposes it to a high probability of compromise.[20] In Belgium, Stephan Moelans, chief executive of installation company Sabcobel, told the Belga news agency that Sabcobel knew of around 20 affected refrigeration units, which needed physical modifications, not only a software update, to address the vulnerabilities.[14]

Kevin Tellier, a cybersecurity expert at security firm Synacktiv, said in comments published by French parliamentary channel Public Sénat that the firm spotted a vulnerability after a 2023 audit of a mass-retail chain, a way around the login screen, & reported it to Danfoss.[43] An advisory from CISA, first published on May 20, 2025 & updated on August 26, 2025, said an unauthorized access vulnerability caused by datetime-based password generation "could potentially result in an authentication bypass" in Danfoss AK-SM8xxA Series controllers before version R4.2.[29] Danfoss created release R4.2 to address that flaw & release R4.3.1 to address two more, & the advisory said no known public exploitation specifically targeting these vulnerabilities had been reported to CISA "at this time".[29]

Censys found that before the October attack 61% of the Danfoss StoreView control panels it found online were in France, & most ran a version where the admin password could be derived from the current date.[44] In IPinfo's scans over the six months before the attack, the share of newer French controllers with every known fix went from 14% to 24%.[38] After the attack, Censys wrote that operators "don’t appear to be patching their controllers; they’re simply taking them off the Internet".[44]

Insurance and liability for spoiled stock

[edit | edit source]

Intermarché said retailers were forced to throw away all the affected products to respect the cold chain,[45] & it confirmed to French news agency AFP that its insurance did not cover this type of incident.[46]

Reuters reported on October 15, 2026 that cyber insurance typically does not cover physical losses from attacks & that supermarkets' claims could be affected if they lacked the latest software updates, according to four insurance brokers.[47] Paul Gooch, deputy departmental head at insurer Tokio Marine Kiln, said outdated software is not usually in itself a reason to reject a claim.[47] David Molony, head of cyber and financial sponsors at insurance broker Aon, told Reuters he recommends specific cover for perishable goods for companies in retail & pharmaceuticals, cover that goes beyond standard cyber policies.[46][47]

Kennedys, a law firm, wrote in a November 3, 2026 alert that cyber policies may cover incident response & business interruption but exclude tangible property damage, while property & refrigeration failure policies may cover stock deterioration yet contain cyber exclusions.[48] The firm added that known vulnerabilities do not automatically establish liability or defeat cover; potential claims against manufacturers, maintenance providers or operators require evidence of applicable obligations, breach & causation.[48]

Cotillard predicted "une guerre juridique" (a legal war) between the big French retailers & Danfoss.[45] Schelcher, referring to the security updates the equipment needed, asked who had informed whom, & when, & whether the refrigeration contractors had informed the stores.[36] The Fédération du commerce et de la distribution, a French retail federation, called on Danfoss & its refrigeration-contractor customers for full transparency & for every necessary measure to be taken without delay.[43]

EU Cyber Resilience Act deadlines

[edit | edit source]

The European Union's Cyber Resilience Act, Regulation (EU) 2024/2847, requires manufacturers of connected hardware & software devices sold in the bloc, from consumer gadgets to industrial controllers like those hit in France, to report actively exploited vulnerabilities & severe incidents affecting their products.[42][49] The regulation will apply from December 11, 2027, but Article 14, which sets out those reporting duties, has applied since September 11, 2026.[49]

Under Article 14, a manufacturer that becomes aware of an actively exploited vulnerability in its product must send an early warning without undue delay & in any event within 24 hours of becoming aware of it; unless the relevant information has already been provided, it must also send a vulnerability notification without undue delay & in any event "within 72 hours of the manufacturer becoming aware of the actively exploited vulnerability", & a final report no later than 14 days after a corrective or mitigating measure is available.[49] The manufacturer must also inform the impacted users of the product, & where appropriate all users, of the vulnerability or incident.[49]

Article 69(2) makes products placed on the market before December 11, 2027 subject to the regulation's requirements only if, from that date, they are subject to a substantial modification.[49] By way of derogation, Article 69(3) applies the Article 14 obligations to all products within the regulation's scope that were placed on the market before December 11, 2027.[49]

ENISA, the European Union Agency for Cybersecurity, told The Record:

the reporting obligations continue to apply after a product with digital elements is no longer supported.

[42]

The Record reported that the act's separate obligations to handle vulnerabilities, including fixing them & issuing free security updates, apply only during a product's support period, which manufacturers define.[42] Where a product was placed on the market before December 11, 2027, or its support has ended, "the manufacturer is not required to comply with the vulnerability handling obligations," ENISA said.[42] The Record also reported that neither the act's stricter requirements for future products, which start in December 2027, nor the EU's revised Product Liability Directive applies retroactively, leaving existing equipment, including the controllers attacked in France, outside both regimes.[42] LRQA, a consultancy, wrote on November 4, 2026 that the act will not put tougher obligations on manufacturers until December 2027, & that until then "nobody is legally required to fix any of this".[50]

See also

[edit | edit source]

References

[edit | edit source]
  1. ↑ 1.0 1.1 1.2 1.3 1.4 1.5 1.6 Sébastien Salpietro (2026-10-13). "Frigos piratés : 300 magasins Intermarché et Netto touchés, le patron des Mousquetaires raconte «l'enfer»". Capital. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  2. ↑ 2.0 2.1 Kim Willsher (2026-10-17). "Not cool: who hacked France's supermarket fridges?". The Guardian. Retrieved 2026-11-05.
  3. ↑ 3.0 3.1 3.2 3.3 3.4 3.5 Angela Charlton; Dee-Ann Durbin (2026-10-13). "Cyberattacks hit European supermarket chains and disrupt refrigeration systems". Associated Press. Archived from the original on 2026-10-13. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  4. ↑ 4.0 4.1 4.2 4.3 4.4 4.5 Jon Henley (2026-11-02). "Shop fridges and freezers across Europe hit by fresh suspected cyber-attack". The Guardian. Retrieved 2026-11-05.
  5. ↑ 5.0 5.1 5.2 5.3 5.4 Jonathan Benton; AFP (2026-11-03). "Which countries in Europe have been hit by supermarket fridge cyber incidents?". Euronews. Archived from the original on 2026-11-03. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  6. ↑ 6.00 6.01 6.02 6.03 6.04 6.05 6.06 6.07 6.08 6.09 6.10 "L'EFS confirme l'incident de cybersécurité impactant un de ces prestataires d'équipement frigorifique". Établissement français du sang. 2026-11-03. Retrieved 2026-11-05.
  7. ↑ 7.0 7.1 7.2 7.3 7.4 7.5 Raphael Satter, AJ Vicens and Phil Stewart (2026-10-29). "Pentagon treating military base freezer malfunctions as suspected cyberattack, officials say". Military Times (Reuters). Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  8. ↑ 8.0 8.1 8.2 8.3 8.4 8.5 8.6 Austin Campbell (2026-10-29). "Pentagon investigates series of commissary freezer failures as possible cyberattack". Task & Purpose. Retrieved 2026-11-05.
  9. ↑ 9.0 9.1 9.2 9.3 9.4 "냉장고 소프트웨어 오류 관련 안내 (9/23)". Samsung Members (Samsung Electronics). 2026-09-23. Archived from the original on 2026-10-14. Retrieved 2026-11-05.
  10. ↑ 10.0 10.1 10.2 10.3 10.4 Jean Leon (2026-09-24). "Samsung Smart Fridges Forgot How to Cool After a Botched Software Update". Android Headlines. Archived from the original on 2026-10-14. Retrieved 2026-11-05.
  11. ↑ 11.0 11.1 11.2 11.3 11.4 11.5 11.6 11.7 11.8 Kim In-kyoung (2026-09-23). "Samsung refrigerator update failure leaves owners flustered, Chuseok food supplies at risk". Korea JoongAng Daily. Archived from the original on 2026-10-13. Retrieved 2026-11-05.
  12. ↑ 12.0 12.1 12.2 이성훈 (2026-09-23). "추석 앞두고 삼성전자 냉장고 잇단 '먹통'…"긴급 복구 중"". SBS 뉴스 (in 한국어). Archived from the original on 2026-09-23. Retrieved 2026-11-06.
  13. ↑ 13.00 13.01 13.02 13.03 13.04 13.05 13.06 13.07 13.08 13.09 13.10 13.11 13.12 13.13 13.14 13.15 13.16 "Tech Insider October 2025". Danfoss. 2025-10-31. Archived from the original on 2026-10-15. Retrieved 2026-11-05.
  14. ↑ 14.00 14.01 14.02 14.03 14.04 14.05 14.06 14.07 14.08 14.09 Alexander Martin (2026-11-02). "Second wave of suspected cyberattacks hits supermarket freezers across Europe". The Record from Recorded Future News. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  15. ↑ 15.0 15.1 15.2 15.3 15.4 15.5 15.6 15.7 "Cyber attacker targets refrigeration plant". Cooling Post. 2026-08-05. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  16. ↑ 16.0 16.1 16.2 16.3 16.4 Mirko Zorz (2026-08-05). "What stops attackers wrecking industrial plants is knowing how". Help Net Security. Archived from the original on 2026-08-06. Retrieved 2026-11-05.
  17. ↑ 17.0 17.1 17.2 17.3 17.4 17.5 17.6 17.7 17.8 Rose L. Thayer (2026-08-28). "Commissaries across the US affected by refrigeration outages". Stars and Stripes. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  18. ↑ Sasha Rogelberg (2026-09-25). "Samsung customers are complaining over spoiled food after an update bricked AI smart fridges". Fortune. Archived from the original on 2026-09-27. Retrieved 2026-11-05.
  19. ↑ 19.0 19.1 19.2 19.3 19.4 19.5 19.6 19.7 19.8 Jennifer H. Svan (2026-09-30). "Refrigeration failures affect 4 military commissaries in Europe". Stars and Stripes. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  20. ↑ 20.0 20.1 20.2 20.3 20.4 20.5 20.6 20.7 20.8 "Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération". CERT-FR (ANSSI). 2026-10-12. Archived from the original on 2026-11-05. Retrieved 2026-11-05.
  21. ↑ 21.0 21.1 21.2 Aymeric Geoffre-Rouland (2026-10-12). ""Inédit et d'une extrême gravité" : des pirates ont programmé les frigos de supermarchés français à 50°C". Les Numériques. Archived from the original on 2026-10-15. Retrieved 2026-11-05.
  22. ↑ 22.0 22.1 22.2 22.3 22.4 Necva Tastan Sevinc (2026-11-03). "Suspected cyberattacks on refrigeration systems spread across Europe". Anadolu Agency. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  23. ↑ 23.0 23.1 23.2 23.3 Bill Goodwin (2026-11-03). "UK abattoirs caught up in cyber attack against European supermarkets". Computer Weekly. Archived from the original on 2026-11-04. Retrieved 2026-11-05.
  24. ↑ 24.0 24.1 24.2 Marie Mannes; Helen Reid; Louise Rasmussen (2026-11-02). "New cyberattack on supermarket fridges sweeps across Europe". Internazionale (Reuters). Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  25. ↑ 25.0 25.1 25.2 25.3 25.4 Simon Ormiston (2026-11-02). "Supermarket hacks across Europe: why are fridges connected to the internet?". Euronews. Retrieved 2026-11-05.
  26. ↑ 26.0 26.1 26.2 26.3 Fanny Ruz-Guindos; Louise Colvert (2026-11-03). "Cyberattaque d'un prestataire de l'EFS : Les hackers ont du sang sur les mains". Le Canard enchaîné. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  27. ↑ 27.0 27.1 Rose L. Thayer (2026-09-01). "Army, Air Force special agents investigate refrigerator outages affecting several commissary stores". Stars and Stripes. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  28. ↑ Hope Hodge Seck (2026-08-28). "DoD confirms 'refrigeration disruption' at military commissaries". Military Times. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  29. ↑ 29.0 29.1 29.2 "Danfoss AK-SM 8xxA Series (Update A)". Cybersecurity and Infrastructure Security Agency. 2025-05-20. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  30. ↑ David Meyer; Mathew J. Schwartz (2026-10-13). "Hackers Attack French Supermarket Freezers Causing Food Loss". BankInfoSecurity (ISMG). Archived from the original on 2026-11-06. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  31. ↑ 31.0 31.1 John Leyden (2015-08-24). "Samsung smart fridge leaves Gmail logins open to attack". The Register. Archived from the original on 2026-03-18. Retrieved 2026-11-05.
  32. ↑ 32.0 32.1 Max Slater-Robins (2015-08-24). "Using a Samsung smart fridge could leave your Gmail account vulnerable to hackers". Business Insider. Archived from the original on 2025-11-15. Retrieved 2026-11-05.
  33. ↑ 33.0 33.1 33.2 Pedro Venda (2015-08-18). "Hacking DefCon 23's IoT Village Samsung fridge". Pen Test Partners. Archived from the original on 2026-03-13. Retrieved 2026-11-05.
  34. ↑ 34.0 34.1 34.2 34.3 34.4 "Commission des affaires étrangères, de la défense et des forces armées : compte rendu de la semaine du 19 octobre 2026". Sénat. 2026-10-21. Retrieved 2026-11-05.
  35. ↑ Tom Hegel (2026-11-03). "Defrost and Disrupt | An Assessment of Europe's Refrigeration Attacks". SentinelOne (SentinelLABS). Retrieved 2026-11-05.
  36. ↑ 36.0 36.1 36.2 "Cyber attaque des supermarchés : Coopérative U veut connaître la responsabilité des frigoristes". La Revue du Digital. 2026-10-13. Archived from the original on 2026-10-14. Retrieved 2026-11-05.
  37. ↑ 37.0 37.1 Sai Molige (2026-10-22). "Cold Chain, Open Control: Exposed Refrigeration Systems Reveal Global Risk". Forescout. Archived from the original on 2026-10-27. Retrieved 2026-11-05.
  38. ↑ 38.0 38.1 38.2 38.3 38.4 38.5 38.6 38.7 João Tomé (2026-10-19). "France's Supermarket Fridges Were Vulnerable Online for Months". IPinfo. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  39. ↑ Omer Faruk Diken (2026-10-13). "French Supermarket Cyberattack: Exposed OT Behind France's Food Supply". SOCRadar. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  40. ↑ 40.0 40.1 40.2 "European Refrigeration Controller Exposure: A Second Attack Wave". Censys. 2026-11-05. Archived from the original on 2026-11-05. Retrieved 2026-11-05.
  41. ↑ 41.0 41.1 41.2 "Danfoss moves to mitigate cyberattack". Cooling Post. 2026-10-12. Archived from the original on 2026-10-20. Retrieved 2026-11-05.
  42. ↑ 42.0 42.1 42.2 42.3 42.4 42.5 Alexander Martin (2026-10-20). "EU cyber law won't force fixes for fridge controllers hit in French attack". The Record from Recorded Future News. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  43. ↑ 43.0 43.1 Simon Barbarit (2026-10-13). "Cyberattaque contre des frigos connectés de supermarchés : « Des systèmes de réfrigération exposés sur Internet », alertent des experts en cybersécurité". Public Sénat. Archived from the original on 2026-10-20. Retrieved 2026-11-05.
  44. ↑ 44.0 44.1 "Frostbitten in France: A Danfoss StoreView Internet Exposure Report". Censys. 2026-10-14. Archived from the original on 2026-11-06. Retrieved 2026-11-05.
  45. ↑ 45.0 45.1 "Cyberattaque contre les supermarchés : le patron des Mousquetaires/Intermarché prédit « une guerre juridique » entre les grands distributeurs et Danfoss". Sud Ouest. 2026-10-13. Archived from the original on 2026-11-03. Retrieved 2026-11-05.
  46. ↑ 46.0 46.1 Paul Lucas (2026-10-16). "French fridges hacked, food destroyed - and the cyber policies almost certainly won't pay". Insurance Business. Archived from the original on 2026-10-17. Retrieved 2026-11-05.
  47. ↑ 47.0 47.1 47.2 George Abbott; Elizabeth Howcroft (2026-10-15). "Insurers: French Supermarkets' Cyber Insurance Unlikely to Cover Food Losses". Reuters (via Insurance Journal). Archived from the original on 2026-10-27. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  48. ↑ 48.0 48.1 Safine Hadri; Alexis Valençon (2026-11-03). "Cyberattacks on refrigeration systems: physical damage coverage gaps". Kennedys. Retrieved 2026-11-05.{{cite web}}: CS1 maint: multiple names: authors list (link)
  49. ↑ 49.0 49.1 49.2 49.3 49.4 49.5 "Regulation - 2024/2847 - EN - EUR-Lex". EUR-Lex. 2024-10-23. Archived from the original on 2026-10-19. Retrieved 2026-11-05.
  50. ↑ Howard Huges (2026-11-04). "When the freezer becomes the attack surface". LRQA. Retrieved 2026-11-05.
Retrieved from "https://consumerrights.wiki/index.php?title=User:Louis/Refrigeration_cyberattacks_2026&oldid=71798"