Fridge Control Tampering Defrosts Stock Across European and UK Retailers

Key points

• Unidentified actors altered refrigerator control settings at retailers.
• French supermarkets were hit first; UK businesses are affected in a later wave.
• Cooling systems defrosted, spoiling perishable stock.
• No CVE assigned; the incident appears operational rather than data-focused.

Retailers across Europe and the United Kingdom are dealing with a fresh round of refrigeration disruption after unknown parties interfered with cooling equipment. The latest incidents surfaced early on Monday, following a first cluster in France over recent weeks.

The tampering targeted controllers that regulate refrigerator temperatures. In affected stores, cooling systems entered defrost cycles or lost proper setpoints, leaving perishable goods at risk. Supermarkets reported spoiled inventory and defrosted cabinets.

The campaign appears to span multiple countries, with British businesses caught in what looks like a second wave. No CVE has been published, suggesting the issue may stem from weak access controls, default credentials, or exposed management interfaces rather than a single software flaw.

Why it matters: food safety, waste, and operational continuity are all at stake when refrigeration controls are manipulated. Watch for internet-facing building controls, vendor remote access, and logs showing setpoint changes. Retailers should verify manual overrides and isolate refrigeration networks.

What to do now

1. Inventory all refrigeration controllers and remove any that are directly reachable from the internet.
2. Replace default or shared credentials on cooling equipment and enforce unique strong passwords.
3. Segment refrigeration and building-management networks away from corporate IT and point-of-sale systems.
4. Enable logging and alerting for temperature setpoint changes, defrost mode activation, and remote login events.
5. Apply available firmware updates from refrigeration vendors and restrict remote support access to approved maintenance windows.
6. Confirm manual override and fail-safe procedures so staff can protect perishable stock during an outage.
7. Report suspicious control-system activity to your incident response team and relevant sector authorities.

Original source

The Record