ALL NORMAL
The screen said ALL NORMAL. The freezers were not.
In October 2026, attackers compromised refrigeration controllers across French supermarket chains. Cases ran long defrosts. Food spoiled. The screens kept saying everything was fine.
What happened
Attackers got into remote refrigeration controllers. About 700 of France's roughly 10,000 supermarket stores were affected (French finance minister, reported by SecurityWeek). Defrost cycles were stretched from 1 to 8 hours, delaying alarms (Le Monde via SecurityWeek). CERT-FR (ANSSI) told operators to take remote controllers off the open internet and restore access only by VPN or protected network.
Sources: SecurityWeek · CERT-FR CERTFR-2026-ALE-012
How a screen can lie
Claroty Team82 lab research (Aug 2026) showed a controller display could be set to any temperature while cooling fans were turned off — the screen still looked normal. That is the mechanism. Field incidents in France showed what it looks like when it happens for real.
Source: Claroty Team82
What Thermo-Simple does about it
The Thermo-Simple unit itself can't be hacked. It doesn't block or stop attacks on your store's controls. It runs totally on its own — its own sensor, its own display, at the case. Wireless is optional, and the LoRa model only sends, never receives. If a controller is hijacked or fails, the light still shows the real temperature. Your team sees it. Product gets moved.
What you should also do
Thermo-Simple is not a replacement for your IT security program. Follow the CISA and FBI primary mitigations for operational technology:
- Primary Mitigations to Reduce Cyber Threats to Operational Technology (CISA, FBI, EPA, DOE)
- AA25-343A — pro-Russia hacktivists and critical infrastructure
The eight verified headlines
- Cyberattack disrupts refrigeration at hundreds of French supermarkets The Record · Oct 11, 2026
- Fridges in French supermarkets hit by cyber attack BBC News · Oct 12, 2026
- Dangerous flaws in refrigeration equipment were disclosed months before retail attacks Cybersecurity Dive · Oct 13, 2026
- Pentagon treating military base freezer malfunctions as suspected cyberattack, officials say Military Times · Oct 29, 2026 · Suspected, not confirmed
- Pentagon investigates suspected cyberattack behind military freezer failures Nextgov/FCW · Oct 29, 2026 · Suspected
- Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups U.S. DOJ · Dec 9, 2025 · Charges, not a conviction
- Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure CISA / FBI · Dec 9, 2025
- Primary Mitigations to Reduce Cyber Threats to Operational Technology CISA, FBI, EPA, DOE · May 6, 2025