# French Supermarkets Hit by IoT Cyberattack: Freezers Forced to 50C French supermarket chains have fallen victim to a sophisticated cyberattack, which saw hackers gain control over the software managing their refrigeration units. The malicious intrusion reportedly forced some freezer temperatures to soar to an alarming 50°C (120°F) overnight, leading to potential significant losses and operational disruptions. The incident, first reported by the BBC, underscores the growing threat landscape surrounding **Internet of Things (IoT)** devices, particularly those integrated into critical commercial infrastructure. ## The Attack Vector: Exploiting Outdated IoT Systems According to one affected supermarket chain, the attackers manipulated the temperature regulation software. While commercial freezers typically undergo brief defrost cycles overnight, during which temperatures rise slightly, the hackers commanded the units to actively heat up and maintain elevated temperatures. **Danfoss**, a major manufacturer of refrigeration and climate solutions, acknowledged the incident. The company stated that the compromised cold units were older models, whose security software could not be updated to address identified risks. This inability to patch critical vulnerabilities proved to be a significant weakness, allowing the attackers to exploit the systems. ## The Pervasive Threat of Unpatchable IoT This incident serves as a stark reminder of a fundamental cybersecurity challenge: the inherent vulnerability of IoT devices, especially those with limited or no update capabilities. Any IoT device that cannot receive security patches is a ticking time bomb, susceptible to known exploits and emerging threats. Even devices that *can* be updated are not entirely immune, as patch management and prompt deployment remain ongoing challenges for many organizations. The **Danfoss** case highlights the critical need for robust security-by-design principles in IoT development and the urgent requirement for organizations to inventory, assess, and secure their connected infrastructure. For IT security professionals and privacy-conscious users, this attack reinforces the importance of scrutinizing the security posture of all connected devices, from consumer gadgets to industrial control systems. The potential for physical damage, financial loss, and supply chain disruption from such attacks is a clear and present danger.