French freezer hack puts Dutch systems on alert
Researchers warn of vulnerable refrigeration controllers, but see no evidence that Dutch cooling systems were attacked.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
.jpg){kind=link}
A cyberattack on refrigeration systems at hundreds of French supermarkets exposes a broader vulnerability in the food chain. Dutch experts so far see no connection with the separate incident at Ahold Delhaize, but warn that outdated refrigeration controllers could also pose risks elsewhere.
In France, refrigeration and freezer systems at hundreds of shops were disrupted remotely this week. According to AP and the French authorities, temperatures rose sharply in some installations, after which shops had to throw away fresh and frozen products. The attack affected supermarket chains that use equipment from Danfoss and other suppliers, among others.
The precise method of attack has not yet been established. Researchers at Claroty had previously described vulnerabilities in the Danfoss AK-SM 800A, a system manager that controls refrigeration installations in shops and storage locations. The researchers say the current attack may be relevant to those risks, but stress that they cannot confirm that the attackers exploited these vulnerabilities.
Danfoss has released security updates and is now publishing a new software package for the AK-SM 800A. The company advises customers to use supported versions and not to expose management interfaces directly to the public internet. Older equipment that no longer receives security updates is a particular problem for companies that keep systems in place for a long time.
The Dutch relevance therefore lies mainly in the technology used, not in a confirmed Dutch infection. According to Security.NL, the National Cyber Security Centre sees no reason to link the French attack to the cyber-security incident that temporarily caused Albert Heijn, Etos and Gall & Gall to shut down systems. NOS also reported that the Dutch incident affected different systems, such as electronic price tags and online orders.
That distinction is important. A supermarket may simultaneously depend on digital price boards, distribution software and refrigeration systems, but those components do not necessarily have a technical connection with one another. A disruption or attack affecting one component therefore does not prove that the entire food chain has been infiltrated. The French case does show, however, that digital access to physical equipment can directly lead to food waste and financial damage.
The responsibility now lies with retailers, refrigeration service providers and manufacturers to establish which equipment is still in use, which updates are available and which connections are publicly accessible. The Dutch government has given no indication that a comparable attack is currently taking place here. The immediate lesson is narrower but concrete: outdated industrial equipment deserves the same security attention as ordinary business software.
One story, several perspectives
What is established
- Refrigeration installations at hundreds of supermarkets in France were disrupted remotely.
- Claroty has previously described vulnerabilities in Danfoss refrigeration controllers.
- The precise connection between those vulnerabilities and the current attack has not been established.
- The NCSC sees no connection between the French attack and the separate Ahold incident.
Left
Arguments Digital security in food chains is a public responsibility. Manufacturers and large retailers should be subject to long-term security updates, reporting obligations and stricter standards, even if that makes older equipment more expensive to replace.
Values Consumer protection, public safety and the responsibility of major market players.
Consequences More regulation could reduce vulnerabilities more quickly, but would increase costs for shops and small businesses.
Centre
Arguments The government should organise minimum standards and supervision, while companies assess risks for each system. Not every incident justifies the same measure; demonstrable vulnerabilities, internet access and service life should be the guiding factors.
Values Proportionality, evidence, continuity and cooperation between government and business.
Consequences A targeted approach prevents panic and unnecessary replacement, but requires long-term oversight and transparent information-sharing.
Right
Arguments Companies should remain responsible for management, updates and network choices. A general obligation could harm innovation and affordability; liability and market incentives should encourage weak administrators to take action.
Values Individual responsibility, freedom of enterprise and limiting administrative burdens.
Consequences Fewer central rules may limit costs, but increase the risk that old systems continue running until an attack causes damage.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The text distinguishes between confirmed news, previously identified vulnerabilities and unproven connections. The Dutch impact is described as a risk, not as an established infection.
- confirmed Hundreds of French supermarkets were affected by an attack on refrigeration installations. — AP and NOS report that hundreds of shops were affected. source
- confirmed Claroty described vulnerabilities in the Danfoss AK-SM 800A. — Claroty published research into authentication and execution vulnerabilities. source
- confirmed The current attack method has not been confirmed. — Claroty explicitly says that the precise attack path is unknown. source
- confirmed The NCSC sees no connection with the Ahold incident. — Security.NL quotes the NCSC on this. source
- confirmed Danfoss is publishing security updates for the AK-SM 800A. — The manufacturer lists current software and security updates. source
Editor's note
The French attack and known vulnerabilities have been confirmed. It has not been established whether Dutch refrigeration installations were affected or whether the same attack method was used.Sources
- Cyberaanval treft Franse supermarkten, koelsystemen op 50 graden gezet — NOS
- French cybersecurity authority warns attack may be ongoing — Associated Press
- Firmware to Root in 30 Minutes: How AI is Changing Threat Intelligence — Claroty Team82
- NCSC ziet geen verband tussen incident bij Ahold en Franse supermarkten — Security.NL
- AK-SM 800A Series security updates — Danfoss
More on this in Dutch media
- RTL Nieuws — „cybersecurity supermarkten”
- FD — „cybersecurity supermarkten”
- Trouw — „cybersecurity supermarkten”