Monitoring a refrigeration system remotely avoids having to send a technician out for every check. But an interface that can transmit data may also provide access to the settings that control the refrigeration. For blood product storage as for a food business, protecting the cold chain therefore also raises a less visible question: who can access the controls remotely, and under what conditions?
In Luxembourg, the Red Cross says that blood collection activities and the storage of blood products have not been affected by the recent incidents. At the same time, the authorities are monitoring attacks targeting refrigeration controllers in Europe. These situations highlight a practical aspect of cybersecurity: protecting the equipment that supports everyday operations.
Refrigeration also depends on digital controls
In a commercial installation, a controller or supervisory system can make it possible to monitor parameters and change how the system operates remotely. This connection facilitates monitoring and maintenance, but it also creates a digital access point. If a management interface is directly exposed to the internet, an unauthorised person could try to alter the configuration.
Not all settings are equivalent. Viewing a value, receiving an alert and changing a control are different capabilities. A configuration change, particularly to defrost schedules, can disrupt the installation’s expected operation. That is why protection is not just about checking that a screen displays a temperature: it also concerns access rights and the settings that control the equipment.
CERT-FR, the French organisation responsible for responding to IT incidents, published an alert on 12 October, updated on 16 October. It specifically targets remote controllers for refrigeration installations.
Consequences that extend beyond the equipment
A deviation in refrigeration conditions can jeopardise goods and interrupt operations. At Cobolux, a meat-processing company based in Wecker, director Paul Faltz told L’essentiel that if a prescribed cold chain can no longer be guaranteed, the products concerned cannot be sold. He also mentions risks to production and deliveries. He says that Cobolux has so far been spared these attacks.
The issue also affects small businesses. Christian Reuter, deputy secretary-general of the Federation of Craftsmen, points out that even a small butcher’s shop may have a connected refrigeration system for remote monitoring. A company’s size is therefore not enough to conclude that its equipment is isolated or protected. A successful attack could have a particularly heavy impact where the loss of a day’s production represents a significant share of the business.
For blood products, the Luxembourg Red Cross told L’essentiel that storage conditions are monitored and cannot be changed remotely. It also says it carried out an internal security audit after a warning from the authorities. Monitoring actual storage conditions and being able to change a control remotely are therefore two separate aspects to distinguish in the association’s responses.
Securing access without cutting off maintenance
CERT-FR recommends removing management interfaces from the public internet, checking the configuration, particularly defrost schedules, and then restricting remote access to a secure VPN or protected network. It also calls for manufacturers’ best practices to be followed. For the Danfoss equipment mentioned, it specifically highlights updates and changing default passwords.
A VPN creates a protected connection for remote access. For the operator, the aim is to retain controlled maintenance access, while knowing who has access to it.
The alert calls for insurance conditions to be checked before cutting off data transmission to the refrigeration technician. It specifies that filtering authorised addresses is a temporary workaround, and that a reset alone is not enough if an exposed device is no longer being patched by the manufacturer.
These recommendations point to the need to involve both IT managers and the refrigeration service provider. The former deal with connection security; the latter knows the settings and requirements of the installation. Any change to access must fit with how it operates: who receives the data, who can change the settings, and who responds when an alert comes in? These questions give access control practical substance, beyond simply having a password.
A situation being monitored across Europe
The High Commission for National Protection (HCPN) told L’essentiel that the Luxembourg authorities were aware of the attacks targeting supermarkets and were in contact with the companies concerned. It stressed the need to strictly monitor sensitive installations and secure remote access.
In a joint statement published on 4 November 2026, the European Commission and the European Union Agency for Cybersecurity (ENISA) report incidents affecting commercial refrigeration systems and similar equipment in several Member States since 11 October. They report a new wave on 1 and 2 November. European incident response and crisis management networks are exchanging information; this coordination is intended to improve monitoring and response.
For operators, the starting point remains very practical: distinguish what needs to be monitored from what can be controlled, identify maintenance access, and check that safeguards continue to be monitored over time. In a cold chain, digital security does not replace physical checks on storage conditions. It helps protect the controls and services on which those checks depend.
References
- CERT-FR, alert on remote controllers for refrigeration installations
- ENISA, joint statement on incidents affecting refrigeration systems in the EU
- L’essentiel, “Cyberattacks: how sensitive sectors protect themselves”
Refrigerated cabinets in a supermarket in Tjøme, Norway, in 2017. Illustrative photo.
