Refrigeration controller exposure: are your OT controls keeping up?

TL;DR: Unknown hackers in France remotely raised supermarket refrigeration controllers to 122°F, affecting about 700 facilities and causing millions of euros in spoiled food, according to Asimily's analysis of the CERT-FR alert. The incident shows that exposed management interfaces, weak device authentication and limited segmentation turn routine OT maintenance into a physical disruption pathway.

Editorial analysis by NHI Mgmt Group, based on content published by Asimily: “French Fridges Heated by Hackers, Slamming Supermarkets and Outing OT Vulnerabilities”.

By the numbers:

• The incident affected approximately 700 facilities and caused millions of euros in spoiled food.

Key questions

Q: What breaks when refrigeration controllers are exposed to the internet?

A: When refrigeration controllers are directly reachable from the internet, attackers can target the management plane instead of the data plane.

Q: Why do compromised credentials and weak remote access controls create such high risk in OT networks?

A: OT environments often rely on remote access paths that reach systems controlling physical processes, so weak credentials become a direct path to operational disruption.

Q: What are the signs that an IoT or OT device is outside your security model?

A: The clearest signs are public IP exposure, default or shared credentials, unmanaged third-party access and devices that can be changed without a formal approval path.

Practitioner guidance

• Remove direct internet exposure from device management Move every refrigeration, HVAC and building-control management interface behind VPN access or isolated internal networks, and confirm no public IPs remain reachable.
• Inventory all connected operational devices Create and maintain an authoritative list of every OT and IoT asset, including units installed or maintained by third parties, so exposed devices can be found before attackers do.
• Review privileged settings on controllers Check setpoints, defrost schedules, security modes and default credentials on devices that cannot yet be replaced or patched, because those values are direct attack levers.

Bottom line: The incident shows how exposed management interfaces on embedded systems can turn routine remote administration into physical disruption.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →