Fridge hack costing millions and sparking fires stemmed from poor security

A massive cyberattack targeting refrigeration systems across 700 French supermarkets has resulted in significant food spoilage and multiple electrical fires. Attackers exploited critical vulnerabilities in Internet-connected controllers manufactured by Danfoss, Dixell, and Copeland. These devices allowed remote administrative access using predictable, date-based credentials or hardcoded passwords, which researchers had previously flagged as significant security risks. By remotely triggering defrost cycles, the hackers forced temperatures to reach 50° Celsius (122° Fahrenheit), causing widespread damage to perishables and infrastructure. Security experts emphasize that the incident was entirely preventable, as the vulnerabilities were well-documented. The attack highlights the severe risks associated with the lack of basic cybersecurity hygiene in industrial IoT devices. As these systems remain connected to the public internet without adequate protection, authorities and security researchers are calling for urgent firmware updates and better credential management across the retail sector to prevent future catastrophic failures.