Breaches and incidentsBriefReported by a reputable outlet, citing the company
French supermarkets: refrigeration controllers forced into defrost
Overnight on 11 Oct attackers took over refrigeration controllers and set them to defrost at roughly 250 to 350 French stores (Carrefour, Monoprix...
- Disclosed
What happened
- Overnight on 11 Oct attackers took over refrigeration controllers and set them to defrost at roughly 250 to 350 French stores (Carrefour, Monoprix, Intermarche, Leclerc, Cooperative U chains), with some stores in other EU countries per SecurityWeek. Stock was destroyed.
- Technique: the controllers were Danfoss units running older software; how they were accessed is not confirmed. Claroty had found thousands of internet-exposed AK-SM 800A interfaces; Danfoss flaws CVE-2025-41450 / -41451 are background, not confirmed as used.
- Attribution: none. Paris prosecutor investigating. (A separate Nextgov report of Iran-suspected freezer tampering at US military commissaries is in UNVERIFIED.)
Live scores
Live scores
CVE-2025-41450- EPSS
- 0.009
low predicted chance of attack - VEDAS
- 0.514
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2025-41451- EPSS
- 0.045
some chance of attack soon - VEDAS
- 0.978
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets
- https://www.securityweek.com/refrigeration-controller-hack-spoils-food-across-european-supermarkets/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.