Danfoss Refrigeration Systems Hacked Due to Default Credentials and Outdated Firmware

Post date: October 17, 2026 · Discovered: October 20, 2026 · 3 posts, 90 comments

Danfoss-managed refrigeration systems in French supermarkets were hacked, causing temperatures to rise to 50°C. The attack exploited default credentials and outdated firmware in the systems.

Commenters largely agree the breach stemmed from poor security practices, with Treczoks calling it a 'complete failure' for using easily guessable credentials and outdated systems. Others, like notannpc, argue against connecting critical appliances to the internet, while whyNotSquirrel criticized the use of the current date as a password. Thallamabond highlighted the 'code of the day' flaw in Danfoss systems as a known vulnerability.

The consensus is that the attack was due to basic security lapses, not sophisticated hacking. However, there is a divide between those who see it as a setup failure and those who believe it reflects poor software engineering standards. The key takeaway is that industrial devices remain vulnerable due to outdated systems and weak security practices.

Key Points

#1The attack exploited default credentials and outdated firmware in Danfoss systems.

Treczoks and vk6flab both pointed out the use of easily guessable credentials and ancient versions of nginx.

#2The 'code of the day' flaw in Danfoss systems was a known vulnerability.

Thallamabond identified this as the root cause of the breach.

#3Using the current date as a password is a glaring security flaw.

WhyNotSquirrel criticized this practice as 'absurd'.

#4Industrial devices are inherently vulnerable due to poor security standards.

Ninja876 suggested using local settings and SNMP traps instead of web-enabled appliances.

Source Discussions (3)

This report was synthesized from the following Lemmy discussions, ranked by community score.

243
points
Not cool: who hacked France’s supermarket fridges?
[email protected]·89 comments·10/17/2026·by Armand1·theguardian.com ↗
19
points
Cyberattacks on Sunday night targeted Danfoss-managed refrigeration systems across hundreds of French supermarkets, heating them to 50°C for roughly six hours (Bloomberg)
[email protected]·1 comments·10/13/2026·by lemmydev2·techmeme.com ↗
6
points
Cyberattack shuts down refrigerators at French supermarkets
[email protected]·0 comments·10/13/2026·by lemmydev2·bleepingcomputer.com ↗