10/15/2026
The refrigerators didn’t fail. They were told to fail.
And that’s the part every security leader should be paying attention to.
When hackers remotely cranked supermarket fridges across France up to 50°C, they didn’t just spoil food — they set fires, triggered tens of millions of euros in losses, and exposed a truth the industry has been slow to confront:
Operational technology (OT) is now a frontline cyber battleground.
This attack wasn’t about stealing data. It was about weaponizing infrastructure — turning cold aisles into heat traps by exploiting outdated Danfoss refrigeration controllers running unsupported firmware.
Hundreds of stores across Intermarché, Cooperative U, Carrefour, Monoprix, and others were hit. Entire inventories were trashed. Fires broke out. And France’s cybersecurity agency ANSSI had to mobilize emergency investigations.
This is the moment CISOs and CIOs must stop treating OT as “just facilities.”
It’s identity.
It’s access.
It’s critical infrastructure.
The refrigeration systems were reachable over the public internet. Some used default credentials. Others ran firmware that hadn’t been updated in years.
This wasn’t a zero‑day.
It was a zero‑effort exploit.
If attackers can turn freezers into furnaces, what stops them from:
🔹 Overheating HVAC systems in hospitals?
🔹 Disabling fire suppression in warehouses?
🔹 Manipulating dosing equipment in food or pharma production?
🔹Shutting down cold-chain logistics across borders?
This wasn’t an attack on supermarkets.
It was an attack on trust in physical systems.
The industry keeps talking about “cyber‑physical convergence” like it’s a future trend.
It’s not. It’s happening.
The French attack proves that any device with an IP address is an identity — and if you’re not governing it, someone else will.
Leaders must rethink OT security through an identity-first lens:
🔹Every controller, sensor, and module needs strong authentication.
🔹 Legacy systems must be isolated or replaced — not tolerated.
🔹 Privileged access pathways must be mapped, monitored, and governed.
🔹 AI-driven anomaly detection must extend beyond IT into OT.
If your IAM program stops at laptops and SaaS apps, you don’t have an IAM program.
You have a partial inventory.
This attack wasn’t “unprecedented” because of its scale — it was unprecedented because it showed how easy it is to weaponize neglected infrastructure.
Food security, public safety, and national resilience are now cyber issues.
And the organizations that win will be the ones that treat OT identities with the same rigor as human and application identities.
👉 If you’re responsible for risk, compliance, or transformation, ask yourself:
Could this happen in your environment?
And more importantly — would you even know?
