Researchers and authorities are investigating a remote attack on Danfoss cooling controllers that impacted over 400 supermarkets in France.
The incident involved unauthorized access to AK-SM 800, AK-SC 355, and unpatched AK-SM 800A units, with attackers setting temperatures to 50°C.
This highlights the risks associated with legacy industrial control systems exposed to the network.
CERT-FR has recommended immediate isolation of these controllers.
How did the attack happen?
The attackers were able to remotely connect to temperature control devices from Danish company Danfoss, which are used by the stores. Danfoss confirmed that the problem was mainly found in older models of devices that are no longer supported with updates. Some units of newer devices were also affected because their software was not up to date.
Which stores were affected?
The incident affected several major supermarket chains in France, including Intermarché, Netto, Coopérative U, Carrefour, Monoprix and E.Leclerc. In addition to the French stores, there are reports that similar problems may have occurred in other countries, such as Germany, Spain, Belgium, Poland and Portugal.
What's next
The French security agency CERT-FR has called on business owners to immediately disconnect the affected systems from the internet to prevent further attacks. The Paris prosecutor's office has opened an official investigation into the incident. So far, authorities have not identified the perpetrators or the exact way they managed to compromise the systems.
Top comments (0)