11 Countries' Grocery Chains Hit by IoT Fridge Hacking Wave

Attackers exploiting unpatched internet-connected refrigeration controllers have spoiled food at supermarket chains in at least 11 European countries and briefly raised temperatures in blood-storage cold rooms at three French sites, according to WIRED's Kernel Panic newsletter. The mechanism behind the incidents is not novel malware or AI-assisted exploitation — it is unpatched firmware and weak, predictable passwords on industrial temperature controllers built by the Danish manufacturer Danfoss.

What Happened to the French Blood Supply on November 2?

The Établissement Français du Sang (EFS), France's national blood and plasma agency, confirmed that cold rooms storing blood were "raised to very high temperatures" on November 2, WIRED reported. EFS said the blood samples were not altered or damaged because the organization's alarm systems and staff detected the temperature change and triggered fail-safe measures before any product was lost.

How Do Attackers Exploit Danfoss Refrigeration Controllers?

Researchers cited by WIRED say the October wave against French supermarkets stemmed from attackers reaching unpatched Danfoss refrigeration controllers that were directly exposed to the internet, in some cases protected only by weak passwords generated from the current date. Danfoss, in public statements referenced by WIRED, said the affected systems "were running outdated firmware" and urged customers to update their products; the company did not respond to WIRED's request for comment. The exploit path does not require custom malware — only a reachable device, old firmware, and a guessable credential.

"It's been true for more than a decade now that our dependence on connected technology is growing faster than our collective will to protect it, which has exposed us to accidents, adversaries, and now potentially agents," Josh Corman, executive in residence for public safety and resilience at the Institute for Security and Technology, told WIRED. "These fragile cold-chain systems are too critical to fail, but we keep experiencing hard lessons."

Which Countries and Military Bases Have Been Hit?

Beyond the 11-country supermarket wave this week, hundreds of French stores were forced to discard food after a separate October attack, WIRED reported. In August, roughly six commissaries and grocery stores on United States military bases suffered comparable incidents that spoiled food, according to WIRED, which cited Reuters reporting that the Pentagon is investigating the cases and coordinating with French law enforcement. It remains unclear whether a single actor is responsible for all the incidents or whether multiple groups are exploiting the same unpatched device class independently.

What Is the Federal Response So Far?

The US Cybersecurity and Infrastructure Security Agency issued an alert addressing the incidents, according to WIRED, though the newsletter's excerpt does not detail specific mitigation steps beyond flagging the pattern of exposed, outdated controllers. Danfoss's own guidance, as relayed to WIRED, is limited to a firmware-update recommendation for customers running the affected product lines.

What Should Operators of Connected Refrigeration Do Now?

The practical exposure described in the sourcing is narrow but severe: internet-facing controllers running old firmware with weak or default credentials. Operators of cold-chain systems — hospitals, blood banks, grocery chains, and military commissaries alike — are the parties directly named in the reporting as needing to confirm firmware versions, remove direct internet exposure where possible, and rotate any date-based or default passwords on Danfoss and similar industrial controllers.

Artiglio is A coming-soon iPhone chief of staff for briefings and drafts. Not on the App Store yet.