Grocery retail
Protect the refrigeration and technology in your store
In October 2026, attackers took over refrigeration systems in hundreds of European supermarkets. Refrigerated and frozen cases warmed up, and the food had to be thrown away. XoT protects the connected equipment in your store without replacing it.
The threat
Refrigeration knocked out in one night
On the night of 11 to 12 October 2026, refrigerated and frozen cases in hundreds of French stores were forced into defrost. Temperatures rose to around 50 degrees Celsius. The affected chains included Intermarché, Carrefour, Monoprix and Leclerc. They expect losses of tens of millions of euros.
The attack targeted the controllers that run the stores' refrigeration systems. Several were old models that no longer received security updates. Thousands of such controllers could be reached directly from the internet.
The French cybersecurity agency gave clear advice. The controllers should be taken off the internet, or access to them should be tightly restricted.
The situation in the store
Why store technology is vulnerable
Refrigeration is connected
The refrigeration system is run by a computer with its own web interface. It sends alarms and can be changed remotely.
Old software
Refrigeration systems stay in use for many years. The controller often stops receiving updates long before the system is replaced.
Remote support from several vendors
The refrigeration contractor, the ventilation company and the alarm company all need to reach their equipment. This often happens through open ports or shared accounts.
Cameras and ventilation
Cameras, ventilation and other connected equipment have the same problem. They often sit on the same network as the refrigeration system.
No IT department in the store
Store owners rarely have time to follow security updates for every machine.
The cold chain must not be broken
If the temperature gets too high, the goods must be thrown away. The store is left with empty cases.
Our brochure "Keep the store open. Keep digital intruders out." is written for store owners. It has checklists, questions for your suppliers and a plan for when something happens.
How XoT helps
Only the right people reach the refrigeration system
| Problem | What XoT does |
|---|---|
| The refrigeration system is visible on the internet | The Lock makes the controller invisible. No inbound ports are open, and unauthorised users get no response. |
| Software that is not updated | The Lock protects the equipment until it can be updated or replaced. The equipment itself is not changed. |
| The contractor needs remote access | The technician gets access to the right system for a set time. You can approve each request. |
| Several vendors on the same network | Each vendor reaches only its own equipment. The refrigeration contractor does not reach the cameras. |
| Traffic to unknown destinations | The Lock can stop traffic out of the equipment and let through only what is needed. |
| Traceability | The XMS logs who reached which equipment, when and for how long. |
How to set it up
Ideally, one Lock in front of each device
You get the best protection with a Lock in front of each connected device. Then an attacker who gets into one device cannot reach the others. This is called micro-segmentation.
One Lock per device
The best protection. Refrigeration, ventilation and cameras are protected separately.
One Lock per store
A simple first step. All connected equipment in the store is protected from the internet.
XoT in the router
For stores that already have a Teltonika router, for example for refrigeration alarms.
The refrigeration contractor
Remote support without open ports
The refrigeration contractor needs to see alarms and change settings remotely. With XoT, the technician connects through the XoT-Bridge. The store network is not opened.
- The technician signs in with their own certificate, not a shared password.
- Access covers only the refrigeration system and only for a set time.
- You see who was connected, when and for how long.
The same applies to the ventilation company, the alarm company and others who provide remote support.
Regulations
Rules that affect the store
| Rule | What it means for the store |
|---|---|
| EU food hygiene rules | The cold chain must not be broken. An attack on the refrigeration system is therefore also a food safety issue. |
| NIS2 | Stores are normally not in scope. A chain's wholesale, warehousing and industrial production can be. |
| CER, the Critical Entities Resilience Directive | Covers the production, processing and distribution of food, among other sectors. In Sweden, a new law is proposed from 1 January 2027. |
| Cyber Resilience Act | From 11 December 2027 there are requirements for new products with digital elements. Refrigeration systems already installed are not affected. |
This is our reading of the rules, not legal advice.
Read about NIS2Read about CERRead about the Cyber Resilience Act
Partner
Cameras and XoT from the same partner
Our partner Prudencia Security installs camera systems in stores in Sweden. They can build in XoT when they install.
Common questions
Do we have to replace the refrigeration system?
No. The Lock sits in front of the controller. The refrigeration system keeps its settings.
Does the Lock affect the cooling?
No. Cooling is controlled in the system as before. The Lock only decides who can reach it over the network.
Can the contractor still work remotely?
Yes. The technician connects through XoT with their own certificate and gets access for a set time.
Does XoT work with our refrigeration system?
The Lock lets through the traffic the policy allows. Tell us which refrigeration system you have, and we will check it together.
We have several stores. Can we manage them centrally?
Yes. One XMS can manage Locks in many stores. You decide who reaches what in each store.
Start with the refrigeration system
Choose the store with the oldest refrigeration system. We help you put a Lock in front of it.