Danfoss refrigeration controllers targeted in coordinated European supermarket attacks
Second wave of Danfoss controller compromises hit European supermarkets after French incidents, exposing weak remote access controls. Evidence trail shows contractor-managed units without segmentation; official language downplays deliberate tampering. Operational risk now extends to any cold chain using the same exposed hardware.
Independent verification is limited to contractor statements and one Reuters interview with a Belgian butcher who lost €15,000 in stock. No state attribution exists; the technical evidence shows only unauthenticated remote management sessions. Next indicators to watch are whether Danfoss issues firmware mitigations by 15 November or whether additional sectors report identical controller abuse.
SENTINEL: Danfoss will publish at least one advisory naming AK-series controllers by 20 November or face regulatory inquiry from ENISA.
Sources (3)
- [1]The Hacker News(https://thehackernews.com/2026/11/second-wave-of-cyberattacks-hits.html)
- [2]CERT-FR October alert(https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALERTE-001/)
- [3]Danfoss security advisories(https://www.danfoss.com/en/service-and-support/security-advisories/)