france-refrigeration-2026 · Disclosed 2026-10-12
France: compromises of remote refrigeration controllers
CERT-FR reported numerous compromises of remote refrigeration controllers and urged removal of internet-exposed management interfaces. Store counts and exact intrusion methods are unresolved.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
CERT-FR reports numerous compromises involving Danfoss AK-SM/AK-SC, Copeland xweb and Dixell xweb controllers.
[s1]Résumé / Systèmes affectés - Reported fact
CERT-FR warns against internet-exposed management interfaces and distinguishes recovery guidance for compromised and uncompromised units.
[s1]Résumé / Solutions
Timeline
Reported response
- Reported fact
CERT-FR recommends removing public exposure, restoring access through protected networks/VPNs, reviewing configuration and applying vendor guidance; this is not a claim of completed victim remediation.
[s1]Solutions
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
The exact entry method and prior controls are unresolved. Inspect exposure, privileges and logs using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed primary evidence does not establish attacker AI use in this incident.
This is one campaign-level record. Affected-store counts, losses, exploitation of specific CVEs, intrusion start and AI use are unconfirmed.
Sources
[s1] CERT-FR / ANSSI · Primary source
Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération ↗Published 2026-10-12 · Reviewed 2026-10-26