Hermes Vector

Tech

Cyberattack heats fridges in hundreds of French supermarkets

Hackers targeted refrigeration systems at major French supermarket chains, causing temperatures to rise to 50°C, spoiling food and sparking fires. Authorities are investigating the 'unprecedented' attack linked to Danish manufacturer Danfoss.

By Hermes-Vector AI Desk

Also in: Español · Português · Français · Deutsch

Checked against 6 sourcesCNBCcbsnews.compeople.comNBC Newssiliconrepublic.comynetnews.com
Illustration for: Cyberattack heats fridges in hundreds of French supermarkets

In brief

  • Hackers remotely heated refrigerators in hundreds of French supermarkets to 50°C, spoiling food and sparking fires.
  • The attack targeted Danfoss refrigeration control systems, many of which were running outdated firmware.
  • French authorities and the Paris prosecutor's office have launched an investigation into the 'large-scale' cyberattack.
  • European Commissioner Christophe Hansen warned that 'the weaponization of food has become a reality.'

Cyberattack heats fridges in hundreds of French supermarkets

Hackers targeted hundreds of French supermarkets in a cyberattack that caused refrigerators and freezers to overheat, spoiling food and sparking fires. The incident, which occurred overnight on Monday, October 12, 2026, affected major chains including Carrefour, Monoprix, Intermarché, and Coopérative U.

Attack Details and Impact

According to Reuters, fridges at these stores heated up to as much as 50 degrees Celsius (122 degrees Fahrenheit). The attack reportedly involved hackers remotely triggering forced defrosting cycles in the refrigeration systems. BFM TV reported that temperatures were "altered remotely, resulting in the destruction of stocks of fresh and frozen products."

The scale of the disruption varied by retailer:

  • Intermarché and Netto: At least 300 shops were targeted, according to statements provided to AFP. Les Mousquetaires, the group that owns these brands, stated in an email to CNBC that the attack affected around 180 stores and expected damages to reach "several million euros in losses."
  • Coopérative U: Over 100 outlets were affected. CEO Dominique Schelcher confirmed the attack on X, stating, "I confirm that a cyberattack has been affecting, since last night, the cold production facilities of several stores in our network."
  • Carrefour: The company said 80 of its supermarkets were attacked, though the vast majority of its 6,000 stores were not affected.
  • Monoprix: Approximately 30 stores were hit, representing about 5% of its roughly 490 locations.
  • E. Leclerc: Several stores were affected after the attack targeted one of its refrigeration equipment suppliers.

Vulnerabilities in Connected Systems

The attack exploited vulnerabilities in refrigeration control systems supplied by the Danish manufacturer Danfoss. Danfoss stated that most of the affected equipment was "legacy" products which "no longer receive software or security updates." The company noted that its AK-SM800 and AK-SC355 fridge regulator systems were notably affected, with some running "outdated firmware."

Cybersecurity experts noted that these vulnerabilities were known. On August 9, cybersecurity firm Claroty detailed weaknesses in the Danfoss AK-SM 800A controller that could have allowed intruders to bypass authentication. Ken Munro, a partner at Pen Test Partners, told Reuters that the well-known vulnerabilities meant attackers were "essentially pushing at an open door."

Official Responses and Investigation

The Paris prosecutor’s office confirmed it had opened an investigation into the "large-scale cyberattack affecting the refrigerators of several major food retail chains across France." The probe aims to identify victims and establish links to reported food losses and fires.

French Prime Minister Sébastien Lecornu instructed the country's National Cybersecurity Agency (ANSSI) to investigate. A person close to the Prime Minister said ANSSI had identified a vulnerability in software supplied by a Danish company and was coordinating with European counterparts, as other countries may be affected.

European Commissioner for Agriculture and Food Christophe Hansen condemned the attack on X, stating, "Food security requires more attention at all levels. Because the weaponization of food has become a reality."

Why it matters

This incident highlights the growing risks associated with the Internet of Things (IoT) in critical infrastructure. Industrial equipment such as refrigeration units, once isolated from the internet, are now connected via sensors and remote monitoring systems. Antoine Hautin of cybersecurity consultancy Almond told AFP that the ability to compromise hundreds of installations simultaneously demonstrated "a certain level of sophistication."

The attack also underscores the financial and logistical challenges of securing legacy industrial systems. While no group has publicly claimed responsibility, the incident has raised concerns about food security and the potential for similar attacks on other connected physical infrastructure across Europe.


Sources

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.

The day's checked news, by email

One short email a day with the top stories. Free, and you can unsubscribe in one click.

Or follow for the latest news:

Advertisement

Comments