Hundreds of supermarkets in France have been hit by a cyberattack targeting refrigeration systems, forcing stores to discard fresh and frozen food after hackers reportedly raised temperatures to as high as 50°C. The attack, which took place overnight from October 11 to 12, also led to reports of fires at some locations. French authorities have launched an investigation into the incident.
The attack affected several supermarket chains, including Intermarché, Coopérative U, Carrefour and Monoprix. Les Mousquetaires, the group that owns Intermarché, said refrigeration units at around 150 stores had been heated to 50°C for approximately six hours. The company said affected food was discarded to prevent health risks. Felix Aim, a senior cyber threat intelligence analyst at Sekoia Threat Detection and Research, also reported possible impacts in Spain, Portugal, Poland, Germany and Belgium. The full financial impact across the retail sector has not yet been established.
Investigators are examining vulnerabilities in internet-connected refrigeration control systems, including equipment running outdated software supplied by Danish company Danfoss. These systems allow refrigeration units to be managed remotely, but security weaknesses can expose them to unauthorized access. France’s National Cybersecurity Agency has been instructed to investigate, while the Paris prosecutor’s office is examining reported food losses and fires. The incident has renewed concerns about the cybersecurity of essential retail infrastructure and the risks posed by inadequately secured connected devices.
