OT Refrigeration Control Systems Under Attack: How Fortinet Protects Industrial Environments

Between October and November 2026, a series of coordinated cyberattacks targeted industrial refrigeration control systems across European supermarket chains. The incidents — first reported in France and later spreading to Sweden, Belgium, Luxembourg, Ireland, and Estonia — disrupted cold-chain operations at major retailers including Intermarché, Carrefour, Monoprix, E.Leclerc, ICA, Coop, Delhaize, and SuperValu. Attackers manipulated temperature setpoints in compromised controllers, raising them to 50°C and causing widespread food spoilage.

This attack marks a significant escalation in threats against Operational Technology (OT) environments. It demonstrates that industrial control systems in commercial and food-supply infrastructure are now active targets — and that the consequences extend beyond data loss into physical safety and public health.

What Happened: Timeline and Scope

On October 11–12, 2026, French supermarket chains reported that their refrigeration systems had been remotely compromised. CERT-FR issued advisory CERTFR-2026-ALE-012, confirming that attackers gained unauthorized access to refrigeration management controllers and altered temperature settings to render stored food unsafe.

By November 2, 2026, a second wave of attacks extended across Northern and Western Europe. ENISA, BSI, and multiple national CERTs confirmed the scope of the campaign, which targeted two primary families of industrial controllers:

The attackers exploited authentication bypass and command injection vulnerabilities in internet-facing management interfaces. In many cases, these controllers were deployed with default credentials or without network segmentation, making them directly reachable from the public internet.

Why OT Environments Are Vulnerable

Industrial control systems in commercial facilities like supermarkets, warehouses, and food processing plants were historically designed for reliability, not cybersecurity. Many OT devices run legacy firmware, lack encryption, and use proprietary protocols that traditional IT security tools cannot inspect. Common vulnerabilities include:

• Internet-exposed management interfaces — controllers accessible via HTTP/HTTPS without VPN or firewall protection
• Default or weak credentials — factory-set passwords never changed after deployment
• Flat network architectures — no segmentation between IT networks, OT controllers, and the internet
• Unpatched firmware — devices running known-vulnerable software with no update mechanism in place
• Lack of monitoring — no visibility into OT network traffic, so anomalous commands go undetected

How Fortinet Protects OT Environments

Fortinet offers purpose-built solutions for securing OT and industrial control systems. The Fortinet OT Security Platform integrates network segmentation, threat detection, virtual patching, and privileged access management into a unified architecture managed through FortiOS.

Network Segmentation with FortiGate and FortiSwitch

The first line of defense for any OT environment is proper network segmentation. FortiGate Rugged firewalls are purpose-built for industrial environments — IP40/IP67-rated, fanless, with extended temperature range and DIN-rail mounting. They enforce micro-segmentation between IT and OT zones, ensuring that refrigeration controllers, HVAC systems, and other OT devices are isolated from the corporate network and the internet.

For network infrastructure in OT environments, FortiSwitch provides secure Layer 2/3 switching with integrated security fabric connectivity. Combined with FortiGate, FortiSwitch enables VLAN segmentation and access control at the switch port level — preventing lateral movement between OT device groups.

For smaller facilities like retail stores and branch offices, the FortiGate 60F and FortiGate 70F deliver enterprise-grade segmentation and threat protection in a compact form factor suitable for retail IT closets.

FortiGuard OT Security Service and Virtual Patching

Many OT devices cannot be patched without shutting down critical processes. Fortinet addresses this with virtual patching through the FortiGuard Industrial Security Service (formerly OT Security Service). This subscription delivers IPS signatures specifically designed to detect and block exploits targeting industrial protocols and OT device vulnerabilities — without requiring firmware updates on the devices themselves.

FortiGuard has already released specific IPS signatures covering the vulnerabilities exploited in this campaign:

These signatures are delivered automatically to FortiGate devices with an active FortiGuard subscription, providing immediate protection for any OT network segment behind a FortiGate firewall.

Privileged Access Management with FortiPAM

One of the key attack vectors in this campaign was unauthorized access to web-based management interfaces. FortiPAM (Privileged Access Management) controls and audits all administrative access to OT devices, enforcing multi-factor authentication, session recording, and just-in-time access. This ensures that even if credentials are compromised, attackers cannot reach management interfaces without passing through additional security controls.

Network Detection and Response

Fortinet NDR (Network Detection and Response) capabilities provide deep visibility into OT network traffic. By analyzing protocol-level communications between controllers and supervisory systems, NDR detects anomalous commands — such as unauthorized temperature setpoint changes — and alerts security teams in real time.

Recommended Actions for OT Operators

Organizations operating refrigeration, HVAC, or other industrial control systems should take immediate steps to assess and improve their security posture:

1. Audit internet exposure — identify all OT devices reachable from the internet and remove direct access. Place controllers behind a FortiGate firewall with strict access policies.
2. Segment OT from IT — deploy FortiGate Rugged or FortiGate NGFW with FortiSwitch to create dedicated OT network zones with controlled inter-zone traffic.
3. Enable virtual patching — activate FortiGuard Industrial Security Service to protect vulnerable devices with IPS signatures while firmware updates are planned.
4. Change default credentials — replace factory passwords on all controllers, gateways, and management interfaces with strong, unique credentials.
5. Implement privileged access controls — use FortiPAM or equivalent to enforce MFA and session auditing for all OT device administration.
6. Monitor OT traffic — deploy network detection tools to identify anomalous protocol commands and unauthorized configuration changes.
7. Apply firmware patches — where feasible, update Danfoss, Copeland, and Dixell controllers to patched firmware versions.

Fortinet Products for OT Security

Frequently Asked Questions

Sources and References

• FortiGuard Threat Signal Report 6553 — OT Refrigeration Control Systems Attack
• CERT-FR Advisory CERTFR-2026-ALE-012
• Danfoss Security Advisories — AK-SM 800 Series, AK-SC 255
• ENISA and BSI Coordinated Advisories — November 2026