Attackers remotely abused internet-exposed supermarket refrigeration controllers—raising temperatures (reports up to ~50°C), forcing defrost cycles, spoiling food, with fires reported in some coverage. CERT-FR alert CERTFR-2026-ALE-012 (first Oct 12, updated Oct 13) names Danfoss AK-SM/AK-SC plus Copeland XWEB and Dixell XWEB. Finance Minister Roland Lescure said about 700 of roughly 10,000 stores were hit (Carrefour, Coopérative U, E.Leclerc, Intermarché, Monoprix among those named in press). CERT-FR: pull management interfaces off the public internet; if compromised, factory-reset, reconfigure, change defaults, prefer VPN—and note EOL units will be re-compromised if left exposed after reset alone. Paris prosecutor opened a large-scale cyber investigation.