---
title: French supermarket refrigeration attack: CERT-FR adds Copeland/Dixell XWEB beside Danfoss; ~700 stores hit | ctxsec
url: https://ctxsec.com/items/france-fridge-ot-2026-10
description: ""
status: "confirmed (CERT-FR + vendor/press)"
published: 2026-10-13
---

> 

[← Cybersecurity News](/news) · [markdown](/items/france-fridge-ot-2026-10.md)

confirmed (CERT-FR + vendor/press)

2026-10-13

### French supermarket refrigeration attack: CERT-FR adds Copeland/Dixell XWEB beside Danfoss; ~700 stores hit

Attackers remotely abused internet-exposed supermarket refrigeration controllers—raising temperatures (reports up to ~50°C), forcing defrost cycles, spoiling food, with fires reported in some coverage. CERT-FR alert CERTFR-2026-ALE-012 (first Oct 12, updated Oct 13) names Danfoss AK-SM/AK-SC plus **Copeland XWEB** and **Dixell XWEB**. Finance Minister Roland Lescure said about 700 of roughly 10,000 stores were hit (Carrefour, Coopérative U, E.Leclerc, Intermarché, Monoprix among those named in press). CERT-FR: pull management interfaces off the public internet; if compromised, factory-reset, reconfigure, change defaults, prefer VPN—and note EOL units will be re-compromised if left exposed after reset alone. Paris prosecutor opened a large-scale cyber investigation.

Sources: [Infosecurity Magazine](https://www.infosecurity-magazine.com/news/french-supermarket-chains/) · [AP News](https://apnews.com/article/france-cyberattack-supermarkets-refrigeration-systems-78a813a8efd466b360655339f96083dc) · [CERT-FR CERTFR-2026-ALE-012](https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/)