A widespread and unprecedented cyberattack targeted hundreds of supermarkets across France, weaponizing refrigeration software to maliciously raise the temperatures of commercial fridges and freezers. The coordinated strike spoiled millions of euros worth of fresh and frozen food, left aisles flooded with hot air, and even sparked minor fires in certain locations. Major grocery giants including Carrefour, Intermarché, Monoprix, E.Leclerc, and Coopérative U fell victim to the breach, prompting an urgent nationwide response and a formal investigation by French cyber-crime prosecutors.

The malicious actors successfully compromised remote management software developed by Danish engineering firm Danfoss, which retailers rely on to monitor and adjust cold-storage temperatures. Instead of executing the standard, brief overnight defrost cycle, the compromised units were forced to heat up and remain warm for hours. Some units reportedly reached temperatures as high as 50 degrees Celsius (120 degrees Fahrenheit). Store managers arriving for the morning shift were met with waves of heat, and hundreds of locations were forced to immediately disconnect their systems from the internet as a precautionary measure to prevent further sabotage.

Danfoss stated that the affected refrigeration units were legacy models operating on older software versions that lacked the capability to receive critical security patches. The engineering firm noted that it had previously advised commercial clients to upgrade to fully supported infrastructure to mitigate such vulnerabilities. Meanwhile, supermarket executives and European officials have strongly condemned the incident, highlighting the growing threat of infrastructure sabotage and the urgent need to bolster security measures safeguarding the food supply chain.

Key Takeaways

• Approximately 400 supermarkets across France were targeted in a sophisticated cyberattack that manipulated refrigeration software.
• Hackers forced commercial fridges and freezers to heat up overnight, resulting in the spoilage and disposal of millions of euros worth of food.
• The attack exploited software provided by Danish firm Danfoss, primarily impacting older, legacy cold-storage units that could not be updated.

Editor’s Analysis & Impact

This unprecedented attack marks a significant escalation in the scope of industrial cyber-sabotage, shifting targets from digital data to critical physical infrastructure and the food supply chain. The incident underscores a major vulnerability in modern retail operations: the reliance on interconnected Internet of Things (IoT) devices and third-party vendor software without adequate end-to-end security updates. As legacy hardware remains operational across many legacy retail sectors, companies face immense financial and operational risks if they fail to modernize their cybersecurity frameworks. Moving forward, grocery retailers and industrial manufacturers will face increased regulatory pressure and must invest heavily in network segmentation, legacy system replacement, and robust threat-monitoring systems to protect vital public resources from malicious actors.

Frequently Asked Questions

Q: Which supermarket chains were affected by the cyberattack in France?
A: Major French food retailers were impacted, including Coopérative U, Intermarché, Netto, Carrefour, Monoprix, and E.Leclerc, with roughly 400 total stores targeted.

Q: How did the hackers compromise the supermarket freezers?
A: The attackers gained control of remote-management software provided by Danish engineering firm Danfoss, which regulates the temperature of the refrigeration units.

Q: What actions are being taken in response to the incident?
A: French prosecutors have launched a dedicated cybercrime investigation, affected stores immediately disconnected vulnerable systems from the internet, and staff discarded all potentially compromised food to ensure public safety.