Refrigeration Cyberattack Hits Copeland and Dixell Controllers at French Supermarkets
Summary
France’s cybersecurity agency expanded its alert to Copeland and Dixell controllers after a refrigeration attack affected about 700 supermarkets. The access method is unknown; authorities recommend disconnecting exposed controllers and securing remote access.
Key points
- ANSSI’s CERT-FR alert first covered compromised Danfoss controllers, then added Copeland XWEB and Dixell XWEB systems.
- The access method is unknown, and authorities have not linked the attack to vulnerabilities previously disclosed in Danfoss or Copeland products.
- Danfoss said many affected devices were end-of-life models no longer receiving patches; some current AK-SM 800A controllers had outdated firmware.
- CERT-FR advised taking affected controllers off the internet and restoring remote access only through a secure VPN or protected network. A factory reset alone does not secure vulnerable end-of-life devices.
- France’s finance minister said about 700 of roughly 10,000 supermarkets were affected. Reported impacts included discarded food, refrigeration reaching 50°C at some Intermarché stores, and fires, according to the Paris prosecutor’s office.
- Censys counted nearly 3,000 internet-exposed Danfoss StoreView panels on October 11; the number in France fell from more than 1,800 to 537 by October 14. Censys said patched and unpatched panels disappeared at similar rates, suggesting disconnection rather than updating.
Article Details
- Victim Organization
- Supermarket chains in France, including Carrefour, Coopérative U, E.Leclerc, Intermarché, and Monoprix
- Incident Type
- Cyberattack disrupting supermarket refrigeration controllers
- Disclosure Date
- 2024-10-12
- Operational Impact
- About 700 supermarkets in France were affected. Refrigeration failures caused food losses; at Intermarché, units reached 50°C for six hours and all food was discarded. The Paris prosecutor’s office said the attack also caused fires. Reports said attackers lengthened defrost cycles, delaying alarms.
- Ransom Or Extortion
- No ransom demand or claim of responsibility had been reported; investigators were reportedly puzzled by their absence.
- Claim Status
- confirmed
People
Vendors
CopelandThe cyberattack that disrupted refrigeration at hundreds of French supermarkets this week also affected equipment from Copeland and its Dixell brand, according to France’s national cybersecurity agency ANSSI.DanfossANSSI’s CERT-FR first warned on October 12 of numerous compromises involving Danfoss AK-SM and AK-SC series refrigeration controllers.
Products
Copeland XWEBA day later, the agency updated its alert to include Copeland XWEB and Dixell XWEB systems.Danfoss AK-SMANSSI’s CERT-FR first warned on October 12 of numerous compromises involving Danfoss AK-SM and AK-SC series refrigeration controllers.Danfoss StoreViewCensys counted nearly 3,000 internet-exposed Danfoss StoreView control panels on October 11, more than 1,800 of them in France.Dixell XWEBA day later, the agency updated its alert to include Copeland XWEB and Dixell XWEB systems.
Countries
BelgiumSekoia’s Félix Aimé told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected, but did not provide details.FranceThe cyberattack that disrupted refrigeration at hundreds of French supermarkets this week also affected equipment from Copeland and its Dixell brand, according to France’s national cybersecurity agency ANSSI.GermanySekoia’s Félix Aimé told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected, but did not provide details.PolandSekoia’s Félix Aimé told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected, but did not provide details.PortugalSekoia’s Félix Aimé told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected, but did not provide details.SpainSekoia’s Félix Aimé told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected, but did not provide details.