French supermarket refrigerators were turned into a national embarrassment overnight — doors open to the world, temperatures overridden, meat and frozen goods forced into rubbish bins. The scene was ugly, avoidable and instructive. Hundreds of stores felt the pain; customers saw the fallout; investigators scratched their heads at the absence of a ransom note or a political manifesto. This episode is a sharp wake-up call: connected devices are only as secure as the maintenance and attention they receive.
What happened, and why it matters
Attackers remotely adjusted cooling units in at least 350 stores across well-known chains. The affected refrigeration controllers used software from a Danish vendor that, according to public statements, had numerous units running firmware labelled “end of life” or otherwise outdated. Known weaknesses in the AK-SM 800A controller had been publicly disclosed months earlier. Yet many devices remained exposed and reachable on the internet.
Investigators found no claim of responsibility and no ransom demand — an odd signature for most criminal or hacktivist operations. That silence is also telling: this looks less like a sophisticated, targeted state campaign and more like a textbook case of sloppy exposure and neglected patches. The attackers pushed at an open door.
Scenes from the ground: a telling anecdote
A neighbourhood grocer in a busy suburban mall described the aftermath with anger and disbelief. “Boxes of food, all gone — thrown away in the middle of the night,” the manager said, voice tight with frustration. “Nobody called to explain. Nobody asked if we had backups or warnings.” A supermarket employee, hands already stained from handling spoiled goods, asked: “Who would do this and why?” The question hung in the air like the smell of defrosted meat.
“Why are our fridges on the internet?” a store assistant demanded. “We only wanted to monitor temperatures, not invite strangers inside.”
How this could have been prevented
The answers are boring but effective: inventory devices, keep firmware patched, remove management interfaces from the public internet, and migrate legacy controllers from end-of-life hardware to supported platforms. These are basic measures, but they are the difference between routine operations and headline-grabbing disruption.
Use of internet search engines that index devices, like Shodan, shows thousands of similar refrigeration interfaces still reachable. That means the problem is widespread and not limited to one country or vendor. If a device is accessible from the open web, expect someone to find and probe it. If vulnerabilities are already documented — and patches exist — failure to apply those patches is negligence, pure and simple.
Practical steps for small and medium enterprises
- Map every connected device now. Know what is online and why.
- Prioritise patching for devices with known CVEs and move legacy systems to supported hardware.
- Isolate operational technology (OT) from corporate and public networks through segmentation and firewalls.
- Remove remote management interfaces from the internet; use VPNs and jump hosts for access.
- Set up basic monitoring: detect unusual commands, sudden temperature changes, or large configuration pushes.
- Train staff on incident signals: an unexplained alarm or an off-schedule defrost are potential red flags.
- Draft and rehearse an incident response plan that includes immediate containment and customer communication.
Why this is not just a technical problem
This incident inflicted real human and financial harm. Food waste, lost sales, waste disposal costs and reputational damage ripple outward. A supplier partnership strained by negligence becomes an expensive lesson in trust broken. Customers, cleaners and staff all feel the consequences first-hand.
There is also a regulatory angle. Laws and compliance regimes increasingly expect reasonable steps to secure operational systems. When a device is labelled ‘end of life’ and continues to control critical operations, liability questions will follow. Insurance policies may not cover losses where basic maintenance was ignored.
Final word: treat industrial IoT with the respect it deserves
Connected equipment is not a gadget to be installed and forgotten. It is infrastructure. It needs lifecycle management, oversight and the discipline of routine checks. A fridge that can be instructed from thousands of miles away is a convenience until it becomes a catastrophe. The lesson is blunt: neglect breeds risk, and small oversights can produce large, smelly messes.
For organisations that still treat devices as disposable or invisible, the cost of indifference is now visible on supermarket floors and in the pockets of businesses. Fix the basics first. Be relentless about patching. Segment networks like lives depend on it — because, increasingly, they do.