Fridge Hack Prevention
webcentivewebcentive - home
Fridge hack prevention: what refrigerator hacks are, real incidents, and how to protect a smart fridge at home or the refrigeration controllers in a store. Two kinds: home smart fridges (Samsung Family Hub, LG ThinQ, GE SmartHQ, Whirlpool) that join your WiFi, and commercial controllers that run a whole store's cold aisles and are often reachable over the internet so service companies can adjust them.
More on webcentive: Today in Refrigerator Hacks News | Firewalls for stores
Each site has quick lookups: who owns it (whois), its history (Wayback Machine), a safety check, and one-tap questions to AI helpers. Grok asks you to tap Send first.
Links last checked Nov 2, 2026.
| Site | X | whois | history | safety | sitesearch | Google AI Mode | Grok | Bing AI | |
|---|---|---|---|---|---|---|---|---|---|
| Real incidents (verified) On Oct 11, 2026, attackers reached internet-exposed refrigeration controllers at up to 700 French supermarkets and forced them into long defrost cycles. Cases rose to about 50°C (122°F) for around six hours, food was thrown out and some units caught fire (BBC, ABC News Australia, Wikipedia). CERT-FR named Danfoss AK-SM and AK-SC, Copeland XWEB and Dixell XWEB controllers; Danfoss said most affected units were older models that no longer get updates. No one has claimed the attack. Home smart fridges have had flaws too (Samsung in 2015, LG SmartThinQ in 2017), fixed by the makers. | |||||||||
| abc.net.au/French supermarkets hacked - ABC News Australia (Oct 13, 2026): temperatures raised to as high as 50°C (122°F), fires and food loss | X: @abcnews | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| bbc.com/French supermarket fridges - BBC News (Oct 12, 2026): fridges in French supermarkets hit by cyber attack | X: @BBCNews | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| blog.checkpoint.com/HomeHack LG - Check Point (2017): “HomeHack” flaw in LG SmartThinQ appliance accounts, fixed by LG | X: @CheckPointSW | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| cert.cyber.gouv.fr/CERTFR-2026-ALE-012 - CERT-FR alert (in French, Oct 12-16, 2026): Danfoss AK-SM and AK-SC, Copeland XWEB and Dixell XWEB controllers compromised; take them off the public internet, VPN-only access | X: @CERT_FR | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| claroty.com/Team82 Danfoss research - Claroty Team82: vulnerabilities found in Danfoss AK-SM 800A controllers, fixed in firmware R4.3.1 | X: @Claroty | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| en.wikipedia.org/2026 French supermarket refrigerator hack - Wikipedia: 2026 French supermarket refrigerator hack (Oct 11, 2026; up to 700 stores) | X: @Wikipedia | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| pentestpartners.com/Samsung fridge - Pen Test Partners (2015): a Samsung smart fridge could expose the owner’s Google login | X: @PenTestPartners | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| theguardian.com/who hacked the fridges - The Guardian (Oct 17, 2026): who hacked France’s supermarket fridges? | X: @guardian | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| Manufacturers involved and their security updates Danfoss (Denmark): AK-SM 8xxA series, fixed in releases R4.2 and R4.3.1 (CISA ICSA-25-140-03). The older AK-SM 800 (non-A) and AK-SC 355 controllers hit in France are end-of-life and get no fix; Danfoss advises replacing them. Copeland (US) and its Dixell brand: XWEB and XWEB Pro, fixed in firmware 1.13 (CISA ICSA-26-057-10, Feb 26, 2026). LG: SmartThinQ 'HomeHack' flaw reported by Check Point on July 31, 2017 and patched by LG at the end of September 2017. Samsung: the 2015 RF28HMELBSR fridge flaw (Pen Test Partners); we could not confirm a Samsung advisory or fixed version. GE Appliances and Whirlpool: no refrigerator-specific advisory found; their security pages are listed for reporting. Stores: ask your refrigeration contractor which controller and firmware you have. | |||||||||
| cisa.gov/ICS advisories - CISA: all industrial control system advisories (search for your controller) | X: @CISAgov | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| cisa.gov/ICSA-25-140-03 Danfoss - Danfoss: CISA advisory ICSA-25-140-03 (May 20, 2025; Update A Aug 26, 2025): AK-SM 8xxA series, versions prior to R4.2 / R4.3.1 affected; fixed in release R4.2 (CVE-2025-41450) and R4.3.1 (CVE-2025-41451, CVE-2025-41452) | X: @CISAgov | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| cisa.gov/ICSA-26-057-10 Copeland - Copeland / Dixell: CISA advisory ICSA-26-057-10 (Feb 26, 2026): XWEB 300D PRO, 500D PRO and 500B PRO firmware 1.12.1 and earlier affected; fixed in firmware 1.13 (units on 1.2.1 or earlier must first update to 1.3.0) | X: @CISAgov | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| copeland.com/product security - Copeland (owner of Dixell): official product security page and XWEB firmware updates | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| danfoss.com/vulnerability disclosure - Danfoss: official security advisories (PSIRT) and vulnerability reporting | X: @Danfoss | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| geappliances.com/security - GE Appliances: SmartHQ cybersecurity page (no fridge-specific advisory found) | X: @GE_Appliances | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| lgsecurity.lge.com - LG: official product security advisories (LG ThinQ / SmartThinQ appliances) | X: @LGUS | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| whirlpoolcorp.com/product security - Whirlpool Corporation: product security page for Whirlpool, KitchenAid and Maytag (no fridge-specific advisory found) | X: @WhirlpoolCorp | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| How to prevent it At home: install firmware updates (turn on auto-update; video: How to Update Software! (We Can Secure Our World), CISA), use a strong unique password and two-factor login on the appliance app account, put smart appliances on a separate guest or IoT network, and turn off features you do not use. For businesses: never put a controller's web login on the public internet; allow remote access only through a VPN with MFA; change every default password; segment refrigeration from store and payment networks; and keep an independent battery-powered thermometer or temperature alarm in every case and walk-in, so you get an alert even if the controller is wrong. Stores: see Firewalls for stores (how a firewall and a separate refrigeration network stop these attacks). Why it matters: spoiled food is a food-safety risk, and a hacked device can be a foothold into the rest of the network or part of a botnet. | |||||||||
| bleepingcomputer.com - BleepingComputer: security news and how-tos | X: @BleepinComputer | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| cisa.gov/update software - CISA Secure Our World: turn on automatic updates | X: @CISAgov | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| foodsafety.gov/power outage - FoodSafety.gov: when to throw food out after a fridge or freezer warms up (may block automated checks) | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| krebsonsecurity.com - Krebs on Security: news on IoT botnets and hacks | X: @briankrebs | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| nist.gov/IoT program - NIST Cybersecurity for IoT program: guidance for connected devices | X: @NIST | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| shodan.io - Shodan: search engine that shows which devices are reachable from the internet. Businesses use it (or a security firm) to check their OWN exposure | X: @shodanhq | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| Products that help | |||||||||
| amazon.com - Amazon: refrigerator thermometers and temperature alarms | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| eero.com - eero (Amazon): mesh WiFi with a separate IoT network | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| firewalla.com - Firewalla: home and small-business firewalls that can isolate smart devices | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| govee.com - Govee: WiFi thermometers and hygrometers (Shenzhen company) | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| inkbird.com - INKBIRD: WiFi fridge and freezer thermometers (Shenzhen company) | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| netgear.com - NETGEAR: routers with guest and IoT networks | X: @NETGEAR | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| sensorpush.com - SensorPush: wireless temperature sensors with phone alerts | X: @SensorPush | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| taylorusa.com - Taylor: battery fridge and freezer thermometers | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| thermoworks.com - ThermoWorks: thermometers and temperature alarms (Utah) | X: none found | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| ui.com - Ubiquiti UniFi: business networking with VLANs for IoT | X: @Ubiquiti | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| Report a fridge hack If you think a fridge or controller was hacked: unplug it from the network (keep it cold), check temperatures with a separate thermometer and throw out food that got too warm, change passwords on the appliance account and router, reset and update the device, and call the maker or your refrigeration contractor. Then report it: businesses to CISA and the FBI (IC3); consumers to the FBI (IC3), the FTC and the manufacturer's security contact (listed above). | |||||||||
| cisa.gov/report - CISA: report a cyber incident (businesses and critical infrastructure) | X: @CISAgov | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| ic3.gov - FBI Internet Crime Complaint Center | X: @FBI | whois | history | safety | search | AI Mode | Grok | Bing AI | |
| reportfraud.ftc.gov - FTC: report fraud and scams | X: @FTC | whois | history | safety | search | AI Mode | Grok | Bing AI | |
webcentive ask Google Bing DuckDuckGo
Number of links: 35
As an Amazon Associate, Webcentive earns from qualifying purchases.