XWEB
Copeland web-based supervisory controller for refrigeration plant, sold under the Dixell brand.
Around 11 and 12 October, attackers changed XWEB-linked supermarket refrigeration systems to defrost, placing Copeland's supervisory controller inside a physical retail disruption.
Last refreshed: 22 October 2026 · Appears in 1 active topic
Which unsupported XWEB models remain exposed in supermarket refrigeration networks?
Timeline for XWEB
Fridge hack spoils food across Europe
Cybersecurity: Threats and DefencesBackground
XWEB is a web-based supervisory controller made by Copeland and sold under the Dixell brand. It is used with refrigeration plant, giving operators a networked way to oversee equipment whose settings affect storage temperatures and food safety.
XWEB was identified as a compromised Copeland refrigeration controller after attackers changed supermarket systems to defrost around 11 and 12 October 2026. The attacks spoiled food stocks across seven European countries, with France reporting most of the damage. The incident shows why a supervisory controller matters beyond its own software: unauthorised changes can reach physical refrigeration equipment and damage stock across multiple sites.
What does XWEB control?
Which XWEB models were compromised in the fridge attacks?
Is XWEB EVO still supported?
How can operators reduce XWEB attack risk?
Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.