Connected buildings · Guidance reviewed 21 October 2026
Your building’s controls deserve attention.
When a controller operates real equipment, a digital problem can become an operational problem. The refrigeration attacks in France are a reason for building owners, facility managers and contractors to review how connected plant is managed.
What has been confirmed in France?
France’s CERT-FR published an alert on 12 October 2026, updated on 16 October, reporting numerous compromises of remote refrigeration controllers. The affected families listed are Danfoss AK-SM and AK-SC, Copeland XWEB and Dixell XWEB. The alert identifies internet-exposed management interfaces as contrary to good practice.
Its advice includes removing direct public exposure, checking configuration, restoring access through a protected network or secure VPN, and applying manufacturer security measures. It also warns that resetting unsupported equipment does not fix the underlying vulnerability. Read the official CERT-FR alert.
This article does not attribute the attacks to a particular person or group, or assume that one vulnerability explains every affected site. The alert and manufacturer guidance should be checked for updates before any remedial work.
What does this mean for a Wellington building?
The practical lesson is to include controls, remote access and support arrangements in the maintenance conversation. A plant schedule might list the chiller or freezer, while leaving out the controller, modem, gateway and account that provide remote access to it.
That gap matters when ownership changes, contractors change or an older controller stops receiving support. The following questions are a starting point for your facilities, mechanical, controls and IT teams.
1. What is connected, and who owns the record?
Build an inventory that includes controllers and gateways as well as the plant. Record the model, location, software or firmware version, support status, responsible supplier and purpose of each connection. Identify which assets are critical to the operation. NCSC New Zealand’s OT asset-inventory guidance provides a structured approach to collecting and maintaining this information.
2. How does remote access actually work?
Ask your IT and controls providers to document the access route and check for direct public exposure. Agree a protected access method, limited permissions and a process for removing access when it is no longer needed. Keep plant networks appropriately separated from other networks. These are areas covered by the joint secure-connectivity guidance supported by NCSC New Zealand.
3. Who can change settings?
Review named accounts, privileged access and authentication. Multi-factor authentication should protect the remote-access service; an older controller that cannot provide it may need a suitable controlled gateway. NCSC’s MFA guidance covers externally facing, critical and privileged access. Your IT provider should confirm how the control is implemented for the actual system.
4. Is the controller still supported?
Ask the supplier to confirm the exact model and firmware against current manufacturer advice. Agree how updates will be tested, backed out if necessary and scheduled around the building. Where security updates have ended, include replacement or an agreed interim protection plan in the asset budget. Treat a controller replacement as part of looking after the equipment it serves.
5. Would the right person see an unexpected change?
Review available logs and alerts for unusual access or configuration changes. The joint connectivity guidance recommends monitoring against normal behaviour. From a maintenance perspective, also check the operational alarm chain: who receives an alarm after hours, who acknowledges it and who attends. For critical refrigeration, ask your specialist whether a separate temperature-monitoring path is appropriate for the risk.
6. What is the plan if a connection must be isolated?
Agree an isolation and recovery plan with the people responsible for the plant and network. Establish how safe local operation, monitoring and site attendance will continue. The joint guidance recommends linking this plan to business continuity and testing it. Save current settings and supplier contacts where the authorised response team can find them.
Do not make an unplanned change to live plant. If compromise is suspected, involve your controls/refrigeration specialist and IT response team promptly. Preserve relevant logs where practical and coordinate any disconnection, restart or reset with safe operation and monitoring. Follow the current advice for the actual equipment.
Where does AI-assisted maintenance fit?
AI may help organise service information or flag patterns for a technician to investigate. Its usefulness depends on the quality and context of the data, and on checking the output against the equipment. Connecting AI to operational systems also introduces questions about data access, permissions and who can approve a change.
NCSC New Zealand’s guidance on AI in operational technology stresses a defined business case, governance, testing, oversight and safety. A sensible first discussion is about the information available and the decision you want to improve. Any live integration or automatic control needs its own assessed and authorised scope.
Start with a useful site and asset review
Winter AC can help facility managers and building owners review the mechanical assets, document condition and prioritise maintenance or replacement investigations. Controls security should be coordinated with your IT provider, controls specialist and equipment manufacturer. A mechanical condition audit is not a penetration test or a cybersecurity certification.
How well do you know your plant?
Tell us about your building, the equipment you rely on and the questions you need answered.
Explore site audits & asset planning ↗ Discuss your building ↗Sources and scope
Prepared for New Zealand building owners and facilities teams. Sources reviewed on 21 October 2026: CERT-FR alert CERTFR-2026-ALE-012 (updated 16 October 2026); NCSC New Zealand’s OT asset-inventory guidance, secure-connectivity guidance, MFA guidance and AI-in-OT guidance, linked above. Site-specific recommendations require the relevant plant and network specialists.