# When the Fridges Go Dark: Your Refrigeration Is OT, and the Cold Chain Is an Attack Surface

> Supermarket and warehouse refrigeration runs on the same industrial control tech as a factory floor — Modbus, BACnet, controllers with default passwords, often reachable from the internet. A cyberattack on a French refrigeration wholesaler and a vulnerability disclosure affecting refrigeration controllers at major US grocers are the wake-up call. Here is why the cold chain is OT, how it gets exposed, and the free tools to check your own.

Source: https://playciso.com/blog/refrigeration-is-ot-cold-chain-cyber-attack-surface-2026 · Published: 2026-10-13 · Publisher: PlayCISO (https://playciso.com)

---

The cheapest way to ruin a supermarket’s week isn’t stealing its customer list. It’s turning off the cold. The systems that keep a frozen aisle, a pharmacy vaccine fridge, or a cold-storage warehouse at temperature are **operational technology** — the same class of industrial control tech as a factory floor — and they are routinely installed with default passwords and left reachable from the internet. The cold chain is an attack surface, and almost nobody treats it like one. _Defensive write-up for security leaders, retail/facilities teams and the people who run the controllers. Synthesised from public reporting; verify specifics against primary sources before acting._ ## Three real events, one lesson “Hackers hit the fridges in France” is a story people half-remember. Here is what actually happened, kept straight: - Beijer Ref France — a major refrigeration and air-conditioning wholesaler — was hit by a cyberattack and shut down computers in the affected areas as a precaution. This is the real “France + refrigeration + cyber” event. - Copeland / Emerson E3 refrigeration controllers — used by grocers including Kroger, Albertsons and Whole Foods — were found vulnerable by researchers at Armis and fixed via firmware. A disclosure, not a breach — but it shows the refrigeration-controller fleet is squarely in scope. - Intermarché (~300,000 customers) and Auchan loyalty data — recent French retailer incidents that were IT data breaches, not refrigeration/OT. Don’t conflate them with the above. The common thread isn’t a single incident — it’s that **refrigeration is under-governed OT**, sitting outside most security programs until something melts. ## Why refrigeration is OT A refrigeration rack or a building-management system (BMS) is run by controllers that speak industrial protocols — **Modbus**, **BACnet**, and vendor buses from the likes of Carel, Danfoss and Copeland. These protocols were designed for trusted, isolated networks: most have **no authentication and no encryption**. The controller will happily accept a setpoint change from anyone who can reach it on the network. That is fine in an air-gapped plant. It is not fine when the same controller is on the store Wi-Fi next to the point-of-sale system, or published to the internet so a contractor can tune it from home. ## How the cold chain gets exposed - Internet-facing remote maintenance. BACnet/UDP 47808, Modbus/TCP 502 and controller web UIs end up port-forwarded for convenience and indexed by scanning services. - Default or blank credentials. Commissioned fast, never hardened. - Flat networks. Refrigeration, HVAC, POS and corporate IT share one VLAN, so a phished laptop can reach a compressor controller. - No monitoring. Nobody is watching the OT segment, so a tampered setpoint or a ransomwared controller is noticed when the product is already warm. ## What’s actually at stake This isn’t a data-privacy problem, it’s a **safety-and-revenue** problem. A mid-size store holds tens of thousands of dollars of perishable stock; a cold-storage warehouse, far more. A compromise means **spoiled inventory, food-safety and regulatory breaches, destroyed temperature-sensitive medicine** in a pharmacy, and — because this is a safety system — potential physical hazard, not just cost. “Restore from backup” doesn’t un-spoil a freezer aisle. ## The fixes are unglamorous (and that’s good) - Inventory every refrigeration/BMS controller — you can’t protect what you don’t know you run. - Get it off the public internet and behind authenticated/VPN remote access only. - Segment refrigeration/BMS from point-of-sale and corporate IT (a real IT/OT boundary, not a shared VLAN). - Change default credentials and disable unused services and protocols. - Plan for it: a manual fallback and a rehearsed incident response for “the cooling is compromised.” ## Check your own posture — free, in your browser We built a set of OT tools that run entirely in your browser (nothing is uploaded, and they never touch your devices): - BMS / Refrigeration Config Auditor — paste a controller config and get the exposure findings. - OT Internet-Exposure Analyzer — paste a Shodan/Censys export of your own hosts and see what’s reachable. - Cold-Chain & OT Downtime Loss Calculator — put a number on a cooling outage. - Cold-Chain Incident War Room — rehearse the decisions before you have to make them for real. - OT Protocol Explorer — understand why Modbus and BACnet trust whoever can reach them. _As of October 13, 2026. Based on public reporting; confirm incident specifics against primary sources, and assess only systems you are authorized to manage._