European refrigeration controllers malfunctioned at hundreds of stores

What Ars reported

On October 14, 2026, Ars Technica described a mass malfunction of refrigeration at an estimated 700 supermarkets in France. Internet-connected controllers that technicians use to administer store-wide refrigerators and freezers were compromised. Defrost ran. Ars says cases reached temperatures as high as 50 degrees Celsius, food spoiled, and in some stores electrical systems caught fire. The security desk is Asked directly, Which other countries does Ars say were reportedly affected? Spain, Portugal, Poland, Germany, and Belgium. Reportedly is Ars's word. This page did not open a notice from each country.Security.

The companies named

Ars names three controller brands: Danfoss, Dixell, and Copeland, Dixell's parent. Copeland told Ars, by email, that the vulnerability it was acknowledging sat in a discontinued, end-of-life generation, and that it was working with customers. Danfoss did not immediately respond to Ars. Ars says CNN was also told the models were discontinued. This page stops at those sentences. It does not describe how a controller was entered. Hardware is The document named in the sources is the record this page will keep.Hardware.

SecurityWeek's widening

SecurityWeek's October 15 headline says the supermarket refrigeration attack widens to Copeland and Dixell controllers. The headline is the part this paper is using. It matches Ars on the product names and adds the word widens, which implies a larger set than the first reports. A French government notice was not the page opened here. The two news accounts are the record, plus Ahold's newsroom as the document that is a different incident. The paper isFutureweb.

Not the Ahold shutdown

This paper already filed Ahold Delhaize's precaution, which took systems offline after a cybersecurity incident. That newsroom post is a US grocery group's websites and operations. The refrigeration accounts are European stores and controller brands. A reader who merges them will mis-state both. The Ahold brief is Asked directly, What does Ars say happened in France? Controllers for store-wide refrigerators and freezers at an estimated 700 supermarkets malfunctioned. Defrost ran long enough that cases reached about 50 degrees Celsius. Food spoiled. In some stores, electrical systems caught fire. Ars places a photograph at an Intermarche in Nevez.Ahold's systems offline.

What this page will not teach

Ars discusses why the controllers were reachable and what researchers said would have changed the outcome. Those passages include credential details and a list of network hygiene steps. This brief does not repeat them. The public impact is the malfunction, the spoiled food, the fires, the store count, and the brands. A procedure is not required for that impact to be true. The advisory, as a form, is The document named in the sources is the record this page will keep.the advisory is the story.

Reportedly, outside France

Ars says Spain, Portugal, Poland, Germany, and Belgium were also reportedly affected. The word is the limit. An estimate of 700 stores is Ars's figure for France, not a number this desk counted. A cost in the tens or hundreds of millions of euros is Ars's range, not an invoice. Privacy is Asked directly, What does SecurityWeek add? Its October 15 headline says the refrigeration attack widens to Copeland and Dixell controllers. That is the second account of the product names. This page uses the headline for that widening and Ars for the French incident.Privacy.

Who is in scope

Stores that ran the named controller generations, on Ars's account, are the people who lost refrigeration. Copeland's email narrows its acknowledgment to a discontinued generation. It does not, in the sentence Ars printed, list every model. Danfoss is named and had not answered when Ars published. Shoppers in Nevez, in the photograph's caption, are the public face of empty cases. Software is Asked directly, Is this the Ahold Delhaize shutdown? No. Ahold's newsroom described precautionary measures after a cybersecurity incident, including taking systems offline. That is a different company and a different document. Sharing a week and a grocery aisle does not make them one event.Software.

A silent attacker is not a motive

Ars says the party behind the attack had stayed silent, and it offers vandalism or a state actor as possibilities. Those are possibilities in a news analysis, not findings. This page will not pick one. Silence is the absence of a claim, not evidence of either story. Open source is Asked directly, Which manufacturers does Ars name? Danfoss of Denmark, and Dixell and its parent Copeland in the United States. Copeland told Ars the issue it was discussing sat in a discontinued, end-of-life generation of controllers. Danfoss did not immediately answer Ars. Ars says CNN also heard Danfoss cite discontinued models.Open Source.

What would replace the split with Ahold

A document that names Ahold Delhaize's US banners and these European controllers as one incident. None of the three sources here does that. Until one does, they stay two briefs. Energy, for a grid rather than a grocery case, is The short answer this page will stand on is this: Ars says controllers at about 700 French supermarkets were compromised, defrost ran, food spoiled, and some electrical systems caught fire. The controllers named are Danfoss and Dixell, whose parent is Copeland. SecurityWeek's headline says the attack widens to Copeland and Dixell. Ahold Delhaize's earlier website shutdown is a different company's precaution, not this incident.Energy.