Full Breakdown
Cyberattack Forces Refrigerators Offline in Hundreds of French Supermarkets
By Drooid · · How we work
Scope of the Attack
An overnight cyber intrusion disabled refrigeration units in a large number of French grocery stores. Reports indicate that between 150 and 200 Intermarché outlets and almost 100 Coopérative U locations were affected, with Carrefour confirming damage at about 80 of its stores and Monoprix reporting incidents at roughly 30 branches. A few E. Leclerc stores also suffered disruptions. The coordinated temperature rise pushed fridges and freezers up to 50 °C (122 °F), causing food spoilage and, in some cases, fires.
Technical Cause and Vulnerabilities
Investigations point to compromised control systems supplied by Danish equipment maker Danfoss. The affected models—AK-SM800 and AK-SC355 regulators—are classified as “legacy” units that no longer receive software or security updates. Danfoss confirmed that the compromised firmware was outdated and had been advised for replacement long before the incident. French cyber-security authorities identified a software vulnerability in the Danfoss products and have contacted the vendor.
Official Reactions
EU food and agriculture commissioner Christophe Hansen warned that the exploitation of food-preserving equipment represents a new reality for food security. Dominique Schelcher, chief executive of Coopérative U, described the breach as “unprecedented” and unacceptable, emphasizing that his teams are fully mobilised to restore operations. Paris prosecutors have opened a formal investigation to identify victims, quantify food losses, and determine any link to the reported fires. President Emmanuel Macron, who recently ordered measures to shield critical infrastructure from Russian hybrid attacks, reiterated the need for heightened protection of essential services. Cyber-security consultant Antoine Hautin noted that the simultaneous targeting of hundreds of units demonstrates a “certain level of sophistication.”
Consequences for Food Supply
Retailers said all fresh and frozen products in the compromised stores must be discarded, creating immediate waste and financial losses. Intermarché warned that insurance policies might not cover this type of in-store incident. The incident has revived concerns across Europe about the vulnerability of industrial equipment that, while traditionally isolated, is now increasingly connected to remote monitoring systems.
Ongoing Investigation and Future Measures
French authorities are coordinating with European counterparts to locate other companies using the vulnerable Danfoss controllers and to prevent further spread. The prosecutor’s office aims to clarify the extent of the damage and to assess whether additional regulatory steps are required to enforce timely firmware updates for critical retail infrastructure.