Fridge Hack Prevention

Text Only | Markdown	X	whois	history	safety	sitesearch	Google AI Mode	Grok	Bing AI	Amazon
Real incidents (verified) On Oct 11, 2026, attackers reached internet-exposed refrigeration controllers at up to 700 French supermarkets and forced them into long defrost cycles. Cases rose to about 50°C (122°F) for around six hours, food was thrown out and some units caught fire (BBC, ABC News Australia, Wikipedia). CERT-FR named Danfoss AK-SM and AK-SC, Copeland XWEB and Dixell XWEB controllers; Danfoss said most affected units were older models that no longer get updates. No one has claimed the attack. Home smart fridges have had flaws too (Samsung in 2015, LG SmartThinQ in 2017), fixed by the makers.
abc.net.au/French supermarkets hacked - ABC News Australia (Oct 13, 2026): temperatures raised to as high as 50°C (122°F), fires and food loss	X: @abcnews	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
bbc.com/French supermarket fridges - BBC News (Oct 12, 2026): fridges in French supermarkets hit by cyber attack	X: @BBCNews	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
blog.checkpoint.com/HomeHack LG - Check Point (2017): “HomeHack” flaw in LG SmartThinQ appliance accounts, fixed by LG	X: @CheckPointSW	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
cert.cyber.gouv.fr/CERTFR-2026-ALE-012 - CERT-FR alert (in French, Oct 12-16, 2026): Danfoss AK-SM and AK-SC, Copeland XWEB and Dixell XWEB controllers compromised; take them off the public internet, VPN-only access	X: @CERT_FR	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
claroty.com/Team82 Danfoss research - Claroty Team82: vulnerabilities found in Danfoss AK-SM 800A controllers, fixed in firmware R4.3.1	X: @Claroty	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
en.wikipedia.org/2026 French supermarket refrigerator hack - Wikipedia: 2026 French supermarket refrigerator hack (Oct 11, 2026; up to 700 stores)	X: @Wikipedia	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
pentestpartners.com/Samsung fridge - Pen Test Partners (2015): a Samsung smart fridge could expose the owner’s Google login	X: @PenTestPartners	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
theguardian.com/who hacked the fridges - The Guardian (Oct 17, 2026): who hacked France’s supermarket fridges?	X: @guardian	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
Manufacturers involved and their security updates Danfoss (Denmark): AK-SM 8xxA series, fixed in releases R4.2 and R4.3.1 (CISA ICSA-25-140-03). The older AK-SM 800 (non-A) and AK-SC 355 controllers hit in France are end-of-life and get no fix; Danfoss advises replacing them. Copeland (US) and its Dixell brand: XWEB and XWEB Pro, fixed in firmware 1.13 (CISA ICSA-26-057-10, Feb 26, 2026). LG: SmartThinQ 'HomeHack' flaw reported by Check Point on July 31, 2017 and patched by LG at the end of September 2017. Samsung: the 2015 RF28HMELBSR fridge flaw (Pen Test Partners); we could not confirm a Samsung advisory or fixed version. GE Appliances and Whirlpool: no refrigerator-specific advisory found; their security pages are listed for reporting. Stores: ask your refrigeration contractor which controller and firmware you have.
cisa.gov/ICS advisories - CISA: all industrial control system advisories (search for your controller)	X: @CISAgov	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
cisa.gov/ICSA-25-140-03 Danfoss - Danfoss: CISA advisory ICSA-25-140-03 (May 20, 2025; Update A Aug 26, 2025): AK-SM 8xxA series, versions prior to R4.2 / R4.3.1 affected; fixed in release R4.2 (CVE-2025-41450) and R4.3.1 (CVE-2025-41451, CVE-2025-41452)	X: @CISAgov	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
cisa.gov/ICSA-26-057-10 Copeland - Copeland / Dixell: CISA advisory ICSA-26-057-10 (Feb 26, 2026): XWEB 300D PRO, 500D PRO and 500B PRO firmware 1.12.1 and earlier affected; fixed in firmware 1.13 (units on 1.2.1 or earlier must first update to 1.3.0)	X: @CISAgov	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
copeland.com/product security - Copeland (owner of Dixell): official product security page and XWEB firmware updates	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
danfoss.com/vulnerability disclosure - Danfoss: official security advisories (PSIRT) and vulnerability reporting	X: @Danfoss	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
geappliances.com/security - GE Appliances: SmartHQ cybersecurity page (no fridge-specific advisory found)	X: @GE_Appliances	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
lgsecurity.lge.com - LG: official product security advisories (LG ThinQ / SmartThinQ appliances)	X: @LGUS	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
whirlpoolcorp.com/product security - Whirlpool Corporation: product security page for Whirlpool, KitchenAid and Maytag (no fridge-specific advisory found)	X: @WhirlpoolCorp	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
How to prevent it At home: install firmware updates (turn on auto-update; video: How to Update Software! (We Can Secure Our World), CISA), use a strong unique password and two-factor login on the appliance app account, put smart appliances on a separate guest or IoT network, and turn off features you do not use. For businesses: never put a controller's web login on the public internet; allow remote access only through a VPN with MFA; change every default password; segment refrigeration from store and payment networks; and keep an independent battery-powered thermometer or temperature alarm in every case and walk-in, so you get an alert even if the controller is wrong. Stores: see Firewalls for stores (how a firewall and a separate refrigeration network stop these attacks). Why it matters: spoiled food is a food-safety risk, and a hacked device can be a foothold into the rest of the network or part of a botnet.
bleepingcomputer.com - BleepingComputer: security news and how-tos	X: @BleepinComputer	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
cisa.gov/update software - CISA Secure Our World: turn on automatic updates	X: @CISAgov	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
foodsafety.gov/power outage - FoodSafety.gov: when to throw food out after a fridge or freezer warms up (may block automated checks)	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
krebsonsecurity.com - Krebs on Security: news on IoT botnets and hacks	X: @briankrebs	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
nist.gov/IoT program - NIST Cybersecurity for IoT program: guidance for connected devices	X: @NIST	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
shodan.io - Shodan: search engine that shows which devices are reachable from the internet. Businesses use it (or a security firm) to check their OWN exposure	X: @shodanhq	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
Products that help
amazon.com - Amazon: refrigerator thermometers and temperature alarms	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: refrigerator thermometer
eero.com - eero (Amazon): mesh WiFi with a separate IoT network	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: eero mesh wifi
firewalla.com - Firewalla: home and small-business firewalls that can isolate smart devices	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: Firewalla
govee.com - Govee: WiFi thermometers and hygrometers (Shenzhen company)	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: Govee thermometer
inkbird.com - INKBIRD: WiFi fridge and freezer thermometers (Shenzhen company)	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: INKBIRD fridge thermometer
netgear.com - NETGEAR: routers with guest and IoT networks	X: @NETGEAR	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: NETGEAR router
sensorpush.com - SensorPush: wireless temperature sensors with phone alerts	X: @SensorPush	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: SensorPush
taylorusa.com - Taylor: battery fridge and freezer thermometers	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: Taylor refrigerator thermometer
thermoworks.com - ThermoWorks: thermometers and temperature alarms (Utah)	X: none found	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: ThermoWorks thermometer
ui.com - Ubiquiti UniFi: business networking with VLANs for IoT	X: @Ubiquiti	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: Ubiquiti UniFi
Report a fridge hack If you think a fridge or controller was hacked: unplug it from the network (keep it cold), check temperatures with a separate thermometer and throw out food that got too warm, change passwords on the appliance account and router, reset and update the device, and call the maker or your refrigeration contractor. Then report it: businesses to CISA and the FBI (IC3); consumers to the FBI (IC3), the FTC and the manufacturer's security contact (listed above).
cisa.gov/report - CISA: report a cyber incident (businesses and critical infrastructure)	X: @CISAgov	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
ic3.gov - FBI Internet Crime Complaint Center	X: @FBI	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none
reportfraud.ftc.gov - FTC: report fraud and scams	X: @FTC	whois	history	safety	search		AI Mode	Grok	Bing AI	Amazon: none