The Wolves Turned Up The Heat (Literally) And The Flock Lost Its Frozen Lamb Chops

I have been saying this for thirty years. Thirty. Years.

You do not put your refrigeration units on a network accessible to the outside world. You do not hand a Danish contractor remote access to every freezer in your building. You do not do these things. And yet here we are, in the year of our Lord 2026, watching French supermarkets throw out metric tons of food because someone with a laptop decided to cook the brie.

The wolves, on the night of October 11th, walked straight through an open gate. Danfoss makes a centralized controller that manages all refrigeration units across an entire store, and maintenance firms can reach it remotely. Convenient for the technician. Absolutely delightful for the attacker. Hundreds of French supermarkets, multiple retail chains, freezers climbing to 50 degrees Celsius. The food is gone. The damage is done.

In the old days, a refrigerator was a refrigerator. It was cold. It was not on the internet. It did not have an IP address. It did not have feelings, ambitions, or a remote access portal. A wolf would have had to physically enter the building to warm your frozen goods, and at that point, you simply called the police. We had this solved. We had it solved with a padlock.

Now I will grant you, remote management of industrial equipment sounds efficient. The Shepherds in the boardroom loved that pitch. "We can monitor everything from anywhere!" Yes. So can the wolves, apparently. Congratulations on your operational efficiency.

The Sky Pasture crowd will tell you this is a supply chain problem, a third-party access problem, a "lessons learned" opportunity. I call it what it is: you gave a stranger the keys to your barn and are now surprised the barn is warm.

Remediation

Listen carefully, because I will not repeat myself at this volume.

One. Segment your operational technology networks. Your refrigeration controllers should not be reachable from the same network your cashiers use to browse whatever it is cashiers browse.

Two. Audit every third-party remote access credential that touches your industrial systems. Every single one. Revoke what is not actively necessary.

Three. Implement monitoring on your OT environment. If a freezer goes from minus 18 to plus 50 in an hour, something should be screaming at a human being.

Four. Require multi-factor authentication on any remote access portal. Non-negotiable. This is not 1994, where we trusted the dial-up caller by the sound of their modem handshake.

Actually, 1994 was simpler. I miss it terribly.

Stay cold out there, or apparently not, depending on who has your Danfoss credentials.

Original Report: https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html