Hackers heated French supermarket fridges to 50 °C: how to protect the cold chain and IoT equipment of your Mexico operation

Between October 12 and 13, 2026, news broke that attackers had taken over Danfoss controllers in hundreds of French supermarkets. They pushed fridge temperatures up to 50 °C, and tons of food ended up in the trash.

No database was stolen and no ransom note showed up. They went after the equipment that keeps the milk cold. If your company runs a restaurant chain, pharmacies, a lab, a warehouse or a food plant in Mexico, this one is worth ten minutes of your time.

What happened in France

As BleepingComputer reported, the damage was physical: stock that could no longer be sold. The Hacker News explains that the attackers hijacked the stores’ Danfoss controllers.

A controller is the small box that decides when the compressor runs, which temperature to hold and when to sound the alarm. Whoever controls it controls your fridge.

The same kind of equipment sits in Mexican sites every day: walk-in coolers, vaccine fridges, cold rooms at food plants, the server room AC. Many now have a web panel or a phone app. That panel is the door.

Why it matters more when HQ is abroad

Refrigeration, HVAC, pumps and control panels are called OT, operational technology: the stuff that runs the physical business, not the office PCs. In Mexico they are usually installed by a local refrigeration or HVAC contractor, not by your IT team.

In our experience, the pattern looks like this:

• Factory default username and password, straight from the manual.
• Remote access open to the internet “so the technician can check from home”.
• Firmware nobody has touched since installation.
• All of it on the same network as the point of sale and the finance PCs.

Your regional IT team abroad often has no idea these devices exist. They never show up in the asset inventory. We saw the same thing with exposed IP cameras.

Put refrigeration on its own network

A VLAN is a virtual network inside the switch you already have: it separates devices without new cabling. If someone gets in through a front desk laptop, they still cannot reach the cold room.

Before	After
Controller reachable from the internet	No ports open to the outside
Factory password	Unique password per device, stored in a vault
Same network as POS and office	Its own VLAN, talking only to what it needs
Contractor logs in whenever	VPN access with a named user and logging

If the local contractor needs remote access, it should go through a VPN with their own account and a log of every session. Same principle we apply to guest Wi-Fi segmentation.

A second pair of eyes that does not trust the controller

Here is what stuck with us: if attackers control the equipment, they also control what the equipment tells you. The display can look fine while everything warms up.

That is why we recommend independent monitoring. LoRa temperature sensors (a long-range, low-power radio that gets through cold room walls) from brands like Milesight. They report to their own gateway over their own network and send WhatsApp or email alerts when readings leave the range you set.

Picture a Sunday night: the cold room starts warming up and the shift lead in Mexico, plus your regional manager abroad, gets a message before the stock is lost.

Your checklist for this week

1. Inventory everything with an IP address: refrigeration, HVAC, UPS, panels, cameras.
2. Check which ones are visible from the internet and close that access.
3. Replace factory passwords, one per device.
4. Move those devices to their own VLAN.
5. Add independent sensors to critical equipment.
6. Decide who answers the alert at 3 a.m., locally.

Let’s talk

What about your Mexico operation?

If your Mexico sites run connected refrigeration, HVAC or control panels, odds are nobody has reviewed them since installation.

ProcessBi inventories connected devices, segments the network, installs IoT sensors with alerts and backs it all with an IT support plan with a written SLA, with local technicians who can be on site when it counts. Invoicing in MXN or USD.

Book your free assessment — we reply the same business day.