Hackers Breach German QSR Menu Board CMS, Alter Prices
2026-11-10 · via AV Magazine
Hackers gained access to the content management system running digital menu boards at a German franchisee of a well-known quick service restaurant chain and changed prices on screens, according to digital signage consultancy invidis. The breach only came to light when customers noticed prices had suddenly gone up.
invidis says the attackers are believed to have exploited a weak default password to get into the CMS. No further detail on the chain's identity, the number of locations affected, or how long the altered prices were live has been reported.
The incident happened in the same week that hackers broke into internet-connected refrigeration control systems at supermarket chains across seven European countries, pushing units into defrost mode and spoiling what the report describes as millions of euros worth of perishable stock. The two incidents are unrelated in terms of target but point to the same underlying problem: operational technology that was never hardened against remote access is now routinely connected to the internet.
For anyone running a menu board network, the mechanics here are unremarkable and that is the point. This was not a sophisticated exploit. It was a default password that nobody changed. That is the kind of gap that exists in a lot of CMS deployments, particularly at franchise level where IT resourcing varies wildly from one operator to the next and screens are often set up once and left alone.
Business-critical, not just marketing
Florian Rotberg, managing director of invidis, said IT security is still treated as a low priority in many digital signage projects, even though menu boards and similar deployments have moved well beyond marketing displays into business-critical infrastructure. A compromised menu board is not just an embarrassment. It is a direct line to what a customer pays at the till, and in this case the manipulation ran long enough for customers to notice before staff did.
The announcement does not say whether the franchisee or the CMS vendor has made any changes since the breach, such as enforcing stronger password policies, two-factor authentication, or network segmentation between menu board systems and other store infrastructure. It also does not name the QSR chain or the software platform involved.
For operators, the practical takeaway is the one that keeps recurring across industry commentary on signage security: default credentials, unpatched CMS software, and screens that sit on the same network as payment or ordering systems represent an attack surface that scales with every new location added to a network. invidis frames both this incident and the supermarket refrigeration breaches as evidence that connected retail hardware generally, not just signage, is being targeted opportunistically rather than through elaborate campaigns.
The announcement in full
Reproduced from AV Magazine for reference. Digital Signage Magazine did not write the text below.
By AV Magazine in Cybersecurity , Digital Signage and DOOH , Europe November 9, 2026 0
Cybercriminals accessed the menu board CMS at the German franchisee of a well-known QSR in the same week that supermarkets across Europe saw freezer temperatures altered remotely.
Hackers accessed the content management system (CMS) of a German franchisee of a well-known QSR chain last week and changed the prices on digital menu boards .
According to the invidis digital signage consultancy, the cybercriminals are believed to have guessed a weak default password and gain access to the CMS. The manipulation came to light only when customers noticed sudden price rises.
The menu board system hacking comes in the same week that hackers broke into internet-connected refrigeration control systems at supermarket chains across seven European countries, forcing them into defrost mode and ruining millions of euros worth of perishable food.
Florian Rotberg, managing director of invidis said IT security is still given low priority in many projects, even though digital signage has evolved from a marketing solution to business-critical infrastructure.
For more information, visit: https://invidis.de/2026/11/cyber-security-wenn-auf-dem-menueboard-ploetzlich-die-preise-steigen/