International Cyber Digest on X: "Regarding the Danfoss refrigeration systems hacked in France

X • October 12, 2026

International Cyber Digest @IntCyberDigest Regarding the Danfoss refrigeration systems hacked in France: The username is `admin`, and the password automatically changes every day to... the current date. Yes, today's date. The French supermarkets affected in today's attacks had exposed all its refrigeration controllers directly to the internet. Every single device reportedly used the same password: today's date... There's also a documented authentication bypass: sending a POST request to /xml.cgi can bypass the login entirely. Via: GossiTheDog International Cyber Digest @IntCyberDigest 6h ‼️ Danfoss says most French supermarket fridges hacked to 50°C were legacy units that no longer get security updates. In August, Claroty found Danfoss AK-SM 800A controllers accept a password made from the date, and counted 2,765 exposed online. Which flaw was used is unknown. 9:09 PM · Oct 12, 2026 · 73.5K Views 55

International Cyber Digest @IntCyberDigest 5h Claroty published a technical write-up the vulnerability here: Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration... From claroty.com

Ed Hansberry @ehansalytics 4h well, we know an American didn't do it because we would have used the MMDDYYYY format. 2

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattack on French Supermarkets Spoils Food via Hacked Refrigeration Systems A cyberattack on supermarket refrigeration systems in France has led to significant food spoilage and fires. The attack affected hundreds of stores, including major retailers like Carrefour and Monoprix, with temperatures in some fridges reaching 50°C (122°F). The Paris prosecutor's office is investigating this large-scale incident, which has prompted concerns about vulnerabilities in Danfoss refrigeration controllers. Reports indicate that many of the affected systems were legacy units lacking security updates. Researchers noted that the systems were exposed to the internet and used a weak password scheme based on the current date. The attack has raised alarms across Europe, with neighboring countries potentially at risk. As of now, the full scope of the incident and the exact method of attack remain unclear. 2 sources 73

Extracted Entities

International Cyber Digest on X: "Regarding the Danfoss refrigeration systems hacked in France

The full story

Extracted Entities

Companies (2)

Countries (1)

CWE Weaknesses (2)

Domains (1)