Last week, hundreds of commercial supermarket freezers across France were remotely instructed to heat up to 50°C (122°F). By the time store managers arrived at Carrefour, Intermarché, and E.Leclerc, fresh produce was ruined, frozen inventory had liquefied, and several sites were dealing with localised fires.
The disruption was not an engineering breakdown, but a coordinated attack on centralised temperature controls across major retail estates. The root issue isn’t just spoiled stock or emergency cut-offs, it is a structural mismatch between cloud management and physical hardware.
The legacy dependency trap
According to Danfoss, the engineering firm supplying the remote temperature management software targeted in the intrusion, the affected refrigeration units were older models that had reached end-of-life and whose firmware was no longer maintained.
This highlights one of the most persistent bottlenecks in modern defensive architecture; the disparity between software lifecycles and physical hardware. While enterprise IT teams patch operating systems and applications on monthly or weekly cycles, operational technology (OT), such as industrial chillers, HVAC systems, and building management controls, is built to last 15 to 25 years.
Security teams frequently find themselves trapped by these legacy dependencies. You cannot patch proprietary controllers without vendor support, yet replacing physical cooling infrastructure across hundreds of commercial sites requires substantial capital expenditure. The result is an expanding attack surface where legacy devices sit permanently exposed on shared networks.
The danger of centralised remote management
Early findings point to remote temperature regulation; a capability designed to optimise energy efficiency and permit central monitoring of defrost cycles and cooling schedules.
Centralised management platforms provide undeniable operational efficiency, but they also create concentrated points of failure:
- Compromising a single management platform grants attackers immediate leverage over thousands of distributed endpoints simultaneously.
- Defrost routines regularly elevate temperatures slightly for scheduled maintenance. The attackers subverted this operational logic, instructing units to heat up and stay hot, transforming a routine maintenance process into a destructive event.
- Because the attack took place overnight when stores were unstaffed, operational teams could not detect the breach until morning managers were confronted with waves of hot air and liquefied inventory.
Operational resilience over convenience
When the attack occurred, retail groups such as Intermarché and Netto disconnected roughly 100 stores from the internet to halt lateral spread. This emergency response underscores an enduring principle of industrial resilience when software integrity fails, physical isolation remains the only dependable solution.
With the Paris prosecutor’s office launching a specialised cybercrime probe and Prime Minister Sébastien Lecornu tasking France’s national cybersecurity agency (ANSSI) to lead the technical inquiry, this incident has escalated into a matter of national resilience.
Organisations managing internet-connected physical systems must treat OT security with the same rigour applied to core enterprise environments:
- Industrial control systems, building automation, and refrigeration controllers must never share routable networks with corporate IT or internet-facing point-of-sale systems, isolating critical segments to limit lateral movement.
- Software controls must be reinforced by physical, hardware-level cut-offs. A digital controller should never possess the administrative authority to heat a commercial deep freezer to 50°C, regardless of what remote commands it receives.
- Environmental monitoring systems must notify on-call engineering teams whenever physical variables cross extreme thresholds outside business hours, bypassing centralised dashboards that an adversary may have manipulated.
As European Food Commissioner Christophe Hansen observed in the aftermath, the weaponisation of essential food-supply chains is no longer a theoretical risk. Digital transformation has wired the commercial fridge into the wider internet; maintaining that infrastructure requires recognising that operational convenience must never come at the expense of defensive architecture.
At Airbus Protect, our consulting and managed security services help organisations across Europe navigate legacy hardware constraints, enforce strict security architectures, and rapidly respond to physical-world intrusions. Whether through comprehensive security design, legacy estate audits, specialist incident response, or assessments of your resilience maturity, we ensure your operational systems are built to withstand active threats without compromising safety or reliability.