European Refrigeration Systems Hit by Cyberattacks as EU Urges Controller Patching
MEP · Smart operations
ENISA and the European Commission warned that commercial refrigeration and French blood bank systems across Europe have suffered cyberattacks. The incidents involve vulnerabilities in Danfoss controllers, prompting calls to patch firmware and disable remote access.
The European Union Agency for Cybersecurity (ENISA) and the European Commission issued a joint statement on November 4 urging organizations managing refrigeration systems to implement immediate safeguards. According to ENISA, cyber incidents involving commercial refrigeration systems emerged across several EU member states starting October 11, followed by another wave on November 1–2. The European Commission convened ENISA, Europol, and member state authorities on November 3 to coordinate countermeasures. Security advisories highlighted three vulnerabilities in Danfoss AK-SM 8xxA series refrigeration controllers (CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452), which are addressed in firmware version 4.3.1. Forescout research published on October 22 indicated that roughly 80% (3,762 of 4,697) of publicly exposed Danfoss StoreView instances worldwide were still operating on unpatched firmware. Reuters reported that three regional blood banks under France's Établissement français du sang (EFS) were also attacked between the night of November 1 and early November 2, affecting monitoring and control systems in some cold rooms. Staff transferred blood products to non-networked units, preventing disruption to supplies. The French Ministry of Health confirmed the incident was contained and remote access for compromised units was disabled. ENISA noted that under the Cyber Resilience Act (CRA), manufacturers must report severe incidents and exploited vulnerabilities via a single platform starting September 11, 2026.
Key takeaways
- Commercial refrigeration systems across Europe and three French blood banks were targeted in cyberattacks between October and early November.
- The incidents involve three vulnerabilities in Danfoss AK-SM 8xxA controllers, with data indicating around 80% of exposed StoreView services remained unpatched.
- French blood banks relocated supplies to offline cold storage upon receiving alerts, and authorities contained the incident by disabling remote access.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.