Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Copeland
AI-generated illustration
OrganisationUS

Copeland

US maker of compressors and refrigeration controls, owner of the Dixell brand.

Copeland is a US maker of heating, cooling and refrigeration equipment whose Dixell brand includes the XWEB monitoring and control family.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Can unsupported Copeland controllers be secured without replacing them?

Timeline for Copeland

#15 12 Oct

Acknowledged a flaw in end-of-life xweb units

Cybersecurity: Threats and Defences: Fridge hack spoils food across Europe
View full timeline →

Background

Copeland makes heating, cooling and refrigeration compression technology, controls and monitoring systems. Copeland LP is registered in Delaware and gives a St Louis, Missouri, address in its website imprint. Its portfolio includes the Dixell Electronics brand and the XWEB family used to monitor refrigeration installations.

Security updates for XWEB EVO stopped after 16 March 2026. That lifecycle decision matters where controllers remain installed in shops or other operational settings, because a retired product no longer receives vendor fixes. Operators must therefore account for product support status when deciding whether to isolate, upgrade or replace older control systems in commercial refrigeration.

Common Questions
What does Copeland make?
Copeland makes compression technology, controls and monitoring systems for heating, cooling, refrigeration and cold-chain uses.Source: Copeland
Which Copeland controllers were named in the fridge attacks?
CERT-FR named Copeland xweb and Dixell XWEB remote refrigeration controllers among the compromised systems.Source: CERT-FR
Is Copeland XWEB EVO still supported?
No. Copeland ended XWEB EVO software support on 16 March 2026, including security patches and corrective updates.Source: Copeland
How should Copeland xweb controllers be secured?
CERT-FR says operators should remove their management interfaces from the public internet and restrict maintenance access through a virtual private network.Source: CERT-FR
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.