What a Refrigerator Teaches About IoT Baseline Hygiene

The refrigeration incident joins a familiar pattern: a long-lived embedded device with a maintenance interface, deployed by an operational team, reachable from the internet, and patched on nobody's schedule. The lesson transfers directly to any organisation running building controls, medical devices or industrial gateways.

The pattern in detail

A controller is installed with a web interface for commissioning. Remote maintenance requires that interface to be reachable, so a port is opened or a vendor tunnel is created. Years pass. The commissioning credential is never changed. The vendor's support ends, as it did for the AK-SM 800 in May 2021 and the AK-SC 355 in 2016, and the device keeps running.
Nothing in that sequence is unusual or negligent in isolation. The risk accumulates through decisions made by different people who each acted reasonably.

The hygiene list that would have helped

Every embedded device has a named owner, operational or technical
Public reachability is a documented decision, not an installation side effect
Maintenance access terminates at a gateway the owner can log
Firmware and support status are recorded with an end-of-support date
Control actions such as mode changes are logged and reviewed
A device that loses support appears on a replacement list automatically

Measuring the shared surface

An external count shows how many similar devices exist elsewhere. ZoomEye query for title="StoreView Web" on 21 October 2026 returned 271 assets globally, with 55 in France, 7 in the Netherlands, and 5 each in Germany and Belgium. Some of those belong to organisations running exactly the pattern above.
The number is also a reminder that the reader's own estate is unlikely to be unique.

What the incident adds

Beyond the hygiene list, the French case adds a detection point: control-mode manipulation that keeps reported values plausible while destroying the product. According to Le Monde, some units were held in defrost mode for up to eight hours, which delayed alarms. Intermarché reported units at 50 degrees Celsius for six hours before all food was discarded.
An IoT baseline that includes behavioural logging, not just availability checks, is the difference between noticing an outage and noticing an attack.