Vulnerabilities & Exploits · IoT / OT Attack

Danfoss refrigeration attacks spoiled food across 700 stores

Dark Reading reports cyberattacks on Danfoss-linked refrigeration controls disrupted more than 700 French food and retail stores in one night. A Sekoia analyst also told Reuters that Spain, Portugal, Poland, Germany and Belgium were affected. The report links the incident to outdated AK-SM firmware; the attackers’ identity remains unknown.

French sources cited by Dark Reading said attackers extended freezer defrost cycles—the periods when equipment briefly warms to melt ice—so dangerous warming looked like routine maintenance. Some equipment reportedly reached 50°C, spoiling food and causing small fires.

For retailers relying on remotely managed refrigeration, the incident shows how a change to normal operating behavior can make temperature monitoring harder to interpret while losses spread across a store fleet. The reporting does not establish how widely the firmware exposure persists.

1 source · Oct 22

CVE-2025-41451

NVD KEV

EPSS 3% (87th percentile).

CVE-2025-41450

NVD KEV

CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.8% (55th percentile).

CVE-2025-41452

NVD KEV

EPSS 0.7% (53rd percentile), up from 0.3%.

Timeline

Sources

Part of the PlainSec briefing for 2026-10-22

Every edition of this story: Danfoss refrigeration attacks spoiled food across 700 stores

More from today