Key security guidelines for control systems following recent incidents in European cold storage facilities

Following recent security incidents involving refrigeration installations in France and other European countries, VDH Products has issued key clarifications to address customer concerns regarding installation security and potential risks to control systems.

Recent security incidents in Europe

In October 2026, incidents occurred at several refrigeration installations in France in which unauthorized parties gained remote access to control systems. In early November, similar incidents were also reported in other European countries. Based on the information currently available, several of the affected installations had control systems that were directly accessible via the public internet and were insufficiently secured, allowing unauthorized parties to modify system settings.

The available information suggests that relatively simple security weaknesses and previously known vulnerabilities may have been exploited, without necessarily requiring sophisticated attack techniques. However, the exact methods used to gain access to all affected installations have not yet been conclusively established. These incidents primarily highlight the importance of a properly secured network environment and the careful configuration of remote access to control systems.

Security of VDH control systems

In cold storage and process management, great importance is placed on the reliability and security of measurement and control systems. A key principle is that controllers are not designed to be directly accessible via the public internet. Therefore, it is recommended to install controllers within a separate, protected network, with communication taking place through the designated VASP-PC.

Remote service tools that make controllers directly accessible via the public internet are not provided. The application uses a secure VPN connection, eliminating the need for controllers to be accessed directly via the public internet. When an installation is configured according to these principles, the controllers are not directly accessible. However, it is important to emphasize that the overall security of an installation does not depend solely on the control equipment used, but also on the network configuration, the connections in place, and the management of access rights.

Recommended security measures

Customers are advised to review the configuration of their installations together with their installer or IT administrator to ensure these principles have been followed. Particular attention should be paid to verifying that controllers are not directly accessible via the public internet, that they are connected to a separate, protected network, and that remote access is only possible through a secure connection. In addition, regular reviews of passwords, access rights, and network equipment security are recommended, alongside ensuring that active software is kept up to date wherever possible.

For critical refrigeration and storage processes in the postharvest sector, the use of independent temperature monitoring and alarm systems is also recommended. This ensures that deviations can still be detected if the primary control system or its associated alarm functions fail to operate correctly. Together, these measures help reduce the risk of unauthorized access and potential damage to stored products.

Source: VDH Products