Topic starter
21/10/2026 2:46 pm
TL;DR: Supermarket refrigeration compromises in France caused cold-storage disruption, hundreds of thousands of euros in losses, and one chain said 150 stores were affected, according to Claroty, while Team82’s prior research found 2,765 exposed Danfoss AK-SM 800A devices and 23 Copeland XWEB vulnerabilities. Exposed operational assets need tighter authentication, segmentation, and visibility because internet reachability turns local control failures into enterprise disruption.
Editorial analysis by NHI Mgmt Group, based on content published by Claroty: “France Supermarket Hacks Expose Risks of Internet-Facing Refrigeration Systems”.
By the numbers:
- Team82’s initial research into exposed Danfoss AK-SM 800A devices turned up 2,765.
- Team82 disclosed 23 vulnerabilities in the Copeland XWEB platform.
Key questions
Q: What breaks when refrigeration controllers are exposed to the internet?
A: When refrigeration controllers are directly reachable from the internet, attackers can target the management plane instead of the data plane.
Q: Why do exposed OT controllers create such high business impact?
A: Because these systems control physical processes, compromise is not limited to data theft or nuisance access.
Q: What are the signs that remote administration of OT assets is failing?
A: Common warning signs include controllers with public IP reachability, unknown management endpoints, outdated firmware, and inconsistent credential controls across sites or vendors.
Practitioner guidance
- Inventory every internet-facing OT controller Build and maintain a complete register of refrigeration, HVAC, and other operational controllers that can be reached from outside trusted networks, including third-party managed devices.
- Remove direct internet exposure Move administrative interfaces behind VPNs or industrial remote access solutions and ensure management ports are never directly reachable from the public internet.
- Constrain administrative pathways Restrict controller administration to trusted network segments and verify that remote access cannot pivot into adjacent operational or enterprise systems.
Bottom line: Internet-facing refrigeration systems can become business-critical attack surfaces when management interfaces are reachable without strong segmentation and access governance.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
21/10/2026 5:00 pm
Internet-exposed operational controllers create an identity problem, not just a network problem: once administrative access crosses the internet boundary, the organisation must govern who or what can reach the control plane, not only whether the device is patched. Claroty’s reporting shows that public reachability is enough to turn an OT asset into a high-value target. Practitioners should treat remote administration of physical systems as a privileged access issue with explicit lifecycle control.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: How should organisations govern remote access without creating unsafe workarounds?
A: They should simplify authentication to a small, supportable set of approved methods, then monitor where users still bypass policy. If employees keep creating shortcuts, the access design is too difficult to use consistently. Governance succeeds only when the secure path is also the practical path for normal work.
👉 Read our full editorial: Internet-facing refrigeration systems expose a wider operational blast radius