Technology, brought to light. · Independent technology reporting

Independent since 2026 · Our standards

IN DEPTH VIDEO ·

Who Turned Up the Fridge? Inside Connected Cooling Security

A verified European refrigeration attack, a labelled fictional reconstruction, and the practical questions to ask before trusting a connected fridge.

English captions and transcript. This video uses synthetic narration, labelled context footage and a clearly marked dramatization of a generic system.

Read the reporting

Who turned up the fridge? What a real cyberattack reveals about connected cooling

Chapters and transcript sections

  1. 0:00 · Which reading do you trust?
  2. 0:36 · What happened in Europe
  3. 1:31 · Why connect a refrigerator?
  4. 2:30 · Reconstruction: the path to the cooling equipment
  5. 3:56 · Three ways into a smart fridge
  6. 5:30 · What the internet scan measured
  7. 6:06 · The two clocks and the cloud
  8. 7:25 · What to check before you trust the screen

English transcript

Which reading do you trust?

The refrigerator has power. The dashboard says the temperature is fine. Then a second thermometer tells a different story. Which reading decides whether the food goes back on the shelf? That scene is fictional. The temperature rise behind this story is real. On November second, a cyberattack raised temperatures in some Swedish retail refrigerators and freezers. The public notice did not say how warm they got, or how the attacker got in.

What happened in Europe

Sweden's public crisis information service confirmed the physical effect a day after the attack. In Belgium, Carrefour said refrigeration equipment was lightly affected at fifteen stores, mainly in freezer sections, and that its stores stayed open. Dutch broadcaster NOS reported a separate account from equipment supplier Danfoss. The company said some affected Dutch systems were outside a secure network and still used default passwords. The Dutch cybersecurity centre described exposed access and weak passwords as a way to change settings remotely. That is evidence about one route in the Netherlands. Sweden's public account leaves the entry route open. A headline that says someone hacked a fridge can hide the distinction between reaching a service and having permission to change how cold the cabinet gets.

Why connect a refrigerator?

Picture a supermarket at two in the morning. Nobody is standing beside the freezer when it begins to warm. An alert lets the duty operator look at the temperature trend, check whether the cabinet is in a planned defrost cycle, and decide whether to call a technician. At the cabinet, a local controller reads sensors and operates equipment such as fans, valves and defrost hardware. A site supervisor can collect readings across cabinets, save a history and send alerts. Depending on the installation, someone with permission can also use it to adjust settings. A chain with hundreds of stores might add a fleet service so the team can compare sites and prioritise repairs. The same screen can make it easier to notice a problem and easier to issue a command. Those are distinct powers. A person who can see the warning rarely needs permission to change the temperature.

Reconstruction: the path to the cooling equipment

Here is a reconstruction using a generic system. The interface and the temperatures are fictional. There is no real store, no real login and no attempt to reproduce an exploit. First, picture a service login that someone can reach from outside the store. In this example the credentials were never changed. The intruder gains a service session and inherits the permissions attached to it. On the supervisor, the session can request a change to the cooling target. The command goes from the site supervisor to the local controller, which runs the cooling equipment. The supervisor and the controller do different jobs. Access to the first only matters if it can tell the second what to do. Now follow the reading back the other way. In a separate, controlled experiment, researchers at Claroty showed that a compromised Copeland supervisor could reach cooling components and change a displayed value separately from a probe reading. Our fictional dashboard still says normal while the independent thermometer tells the operator to look again. That experiment explains how a reassuring screen and a warming cabinet can coexist. It does not establish that anyone falsified readings in Sweden. Lumacta did not test an appliance or reproduce the attack.

Three ways into a smart fridge

A kitchen fridge uses some of the same building blocks, but the evidence there is different. Start with the connection itself. In twenty fifteen, Pen Test Partners found a flaw in the calendar connection on one Samsung model. It used encryption but did not properly verify who was at the other end. Someone positioned to intercept that connection could impersonate the service. Then there is the account. In twenty seventeen, Check Point demonstrated a weakness in LG’s SmartThinQ login using a robot vacuum and its camera. Refrigerators could also link to the platform. The demonstration involved a vacuum. The controls a stolen account exposes depend on the product it actually manages. Finally, a flaw can be inside the connected device or its controller. The practical question is which permissions the vulnerable component has. Samsung documents remote temperature adjustment for supported models. That is a legitimate feature. It tells you what an authorised session can do on those models. The right precaution depends on where the weakness sits. Two-step verification can help protect an account. It cannot repair a software flaw. Separating a device on your home network can limit what it reaches locally. An authorised cloud command can still arrive over its normal connection.

What the internet scan measured

Censys counted six thousand six hundred and ninety-five internet-visible hosts across two commercial controller families on October ninth. By November fifth it counted three thousand one hundred and twenty-four. That is a drop of roughly fifty-three percent in the observed hosts. The chart measures what was visible on those dates. It cannot tell us how many businesses were compromised or what caused the decline. An exposed service is a reason to review access. It is not proof that anyone got in.

The two clocks and the cloud

The refrigerator itself can keep working long after an app or security policy changes. A United States Department of Energy analysis used fourteen point three years as an average lifetime for standard-size refrigerators and refrigerator-freezers. That figure describes a category, rather than the life of any unit in a shop. The other clock counts security updates. Samsung's UK page for one Family Hub model lists an end date of December thirty-first, twenty thirty. That is a particular model in a particular market. If you buy the same model late, you may have fewer years of support left. Cloud features have their own dependencies. A twenty twenty-six preprint mapped eight uses across three household models from manuals and product pages. It identified features that rely on services outside the owner's control. It did not measure how often they fail or test whether those fridges stop cooling when disconnected. A remote alert can be worth having. Ask which controls and warnings still work at the appliance itself, where you can find the update end date, and what happens to photos and shared access when you sell the fridge.

What to check before you trust the screen

If the temperature seems wrong, keep the appliance powered and check independently with an appliance thermometer. If food may have warmed, use your local food-safety authority's guidance. Appearance alone cannot establish that food is safe. If you see an unfamiliar login or an unexplained change, review account activity from a trusted device and remove sessions you do not recognise where the service allows it. Follow the manufacturer’s instructions if you need to isolate the network connection. Check which warnings you will lose when you do. For store teams, stop unauthorised remote access and verify the configuration separately. Blocking a connection can stop more commands arriving while leaving a changed setting in place. Confirm the cabinet's recovery independently and follow your food-safety procedure. A connected refrigerator can give you an earlier warning. The value of that warning depends on who can change the settings, how long updates last, and whether you can check the temperature another way. Full reporting and the sources are at Lumacta News.

Production and media credits

Sources

More In Depth videos