Internet-exposed OT controllers: what it means for remote access governance

TL;DR: French supermarket refrigeration attacks show how internet-exposed OT controllers can turn routine remote access into physical disruption, with attackers forcing long defrost cycles and causing spoilage, equipment damage and widespread operational loss, according to Nozomi Networks. The real control gap is not the device alone but the combination of reachable interfaces, weak remote access governance and unclear accountability for contractor-managed systems.

Editorial analysis by NHI Mgmt Group, based on content published by Nozomi Networks: “French Supermarket Fridge Cyberattacks and the Risks of Internet-Connected OT”.

By the numbers:

• Reuters puts the total at a minimum of 350 supermarkets.
• On October 12, researcher Baptiste Robert found 2,752 exposed Danfoss systems, 1,590 of them in France.
• Reuters found at least 4,500 Danfoss interfaces still visible through Shodan.

Key questions

Q: What breaks when OT devices are exposed to the internet?

A: Internet exposure turns HMIs and PLCs into reachable control points rather than protected field assets.

Q: Why does remote access to OT increase physical risk?

A: Remote access increases physical risk because it creates a live path from identity credentials to process control.

Practitioner guidance

• Remove direct internet exposure to OT controllers Eliminate public access to refrigeration, HVAC and other process controllers wherever business operations can use a mediated path instead.
• Inventory every remote-accessible controller Track model, firmware, support status and connectivity path for each site so you can match exposure to vulnerability and ownership.
• Replace shared and default credentials Require unique administrative credentials for each maintenance relationship and remove any default or factory-set access still present.

Bottom line: Internet-exposed refrigeration controllers can be manipulated through ordinary management interfaces, which makes remote access governance a physical security issue as much as a cyber one.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →