Topic starter
25/10/2026 11:11 am
TL;DR: Internet-exposed refrigeration controllers can be manipulated through ordinary management interfaces, making remote access governance a physical security issue as much as a cyber one, according to Nozomi Networks. OT operators need to treat reachable interfaces and contractor access as part of process safety, not just IT administration.
Editorial analysis by NHI Mgmt Group, based on content published by Nozomi Networks: “French Supermarket Fridge Cyberattacks and the Risks of Internet-Connected OT”.
By the numbers:
- Reuters puts the total at a minimum of 350 supermarkets.
- On October 12, researcher Baptiste Robert found 2,752 exposed Danfoss systems, 1,590 of them in France.
- Reuters found at least 4,500 Danfoss interfaces still visible through Shodan.
Key questions
Q: Why does remote access to OT increase physical risk?
A: Remote access increases physical risk because it creates a live path from identity credentials to process control.
Q: What breaks when OT devices are exposed to the internet?
A: Internet exposure turns HMIs and PLCs into reachable control points rather than protected field assets.
Practitioner guidance
- Remove direct internet exposure to OT controllers Eliminate public access to refrigeration, HVAC and other process controllers wherever business operations can use a mediated path instead.
- Inventory every remote-accessible controller Track model, firmware, support status and connectivity path for each site so you can match exposure to vulnerability and ownership.
- Replace shared and default credentials Require unique administrative credentials for each maintenance relationship and remove any default or factory-set access still present.
Bottom line: Internet-exposed refrigeration controllers can be manipulated through ordinary management interfaces, which makes remote access governance a physical security issue as much as a cyber one.
Glossary terms: Internet-Facing Operational Technology, Remote Access Governance, Control Abuse, Distributed OT Estate
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 7 days ago by NHI Mgmt Group
27/10/2026 7:17 pm
Internet-reachable OT management is the governance failure, not just the technical condition. When a controller can be administered from the public internet, the attacker does not need to defeat the process logic, only the access model. That collapses the distinction between maintenance and intrusion, which is why remote access policy, segmentation and contractor governance sit at the centre of the risk.
A question worth separating out:
Q: Why does remote access to OT increase physical risk?
A: Remote access increases physical risk because it creates a live path from identity credentials to process control. If access is weakly governed, shared, or contractor-managed without strong segmentation, the same path used for maintenance can be abused to alter equipment behaviour. In distributed environments, that can affect many sites at once and turn a local access problem into a business continuity issue.
👉 Read our full editorial: Internet-exposed OT controllers turn routine remote access into outage risk
This post was modified 7 days ago by NHI Mgmt Group