Full Breakdown
Cyberattack Overheats French Supermarket Refrigeration Systems
By Drooid · · How we work
Core Event
During the night of October 11, hackers accessed Danfoss refrigeration-control modules in hundreds of French supermarkets, forcing a continuous defrost cycle. Temperatures rose to about 50 °C (122 °F) for six hours, spoiling products and igniting small fires. Retailers hit included Intermarché, Netto, Cooperative U, Carrefour, Monoprix and E. Leclerc.
Background & Context
The compromised devices were older Danfoss controllers that had not received firmware updates since 2021, leaving them exposed to the internet. Claroty had previously flagged similar vulnerabilities, and Danfoss says it issued a patch before the incident. French authorities had recently heightened vigilance against “hybrid attacks” on critical infrastructure, a policy shift announced by President Emmanuel Macron weeks earlier.
Data & Statistics
- Stores affected: reports range from over 400 supermarkets (New York Times) to about 700 (Finance Minister Roland Lescure). Intermarché saw 150-200 locations hit, Netto about 150, Cooperative U 80 of its 2,000 outlets, Carrefour 80 stores and Monoprix 30 stores.
- Temperature exposure: up to 50 °C for roughly six hours.
- Financial impact: Intermarché CEO Thierry Cotillard estimated “tens of millions of euros” in losses in a single day; two eastern-France supermarkets reported combined losses of about $302,000.
Official Statements & Responses
- Sebastien Lecornu, French Prime Minister, said the National Cybersecurity Agency (ANSSI) identified a Danfoss software vulnerability and is coordinating with European counterparts.
- Kirsten Tate, spokeswoman for Danfoss, noted that only a limited number of outdated units were affected and reiterated advice to keep firmware current.
- Thierry Cotillard, CEO of Les Mousquetaires (owner of Intermarché), warned nationwide losses could reach “tens of millions of euros.”
- Christophe Hansen, EU Food and Agriculture Commissioner, said “food security requires more attention at all levels.”
Verbatim Quotes
- “Targeting equipment essential to the preservation of fresh products is an attack on the French food supply chain. It is unprecedented, extremely serious, and unacceptable,” — Dominique Schelcher, CEO.
Impact & Why It Matters
The breach shows how cyber-exploitation of industrial control systems can threaten food safety and supply chains. Analysts note the attack highlights the growing potential of AI-assisted hacking to bypass traditional defenses. The presence of similar Danfoss controllers in other European countries raises cross-border security questions, prompting ANSSI to liaise with partners.
Conflicting Reports & Gaps
Sources differ on the exact scale: the Paris prosecutor’s office confirmed a “large-scale” attack but gave no precise count; the New York Times cited “more than 400” supermarkets, while the Finance Minister referenced “about 700.” Loss estimates vary from “tens of millions of euros” to the specific $302,000 figure for two eastern stores. No group has claimed responsibility, and fire damage remains unverified beyond “small fires” reported in several outlets.
What’s Next
ANSSI and the Paris prosecutor’s cybercrime division continue investigations to identify the perpetrators and assess the full extent of spoilage and fire damage. Danfoss is working with retailers to deploy updated firmware and improve network segmentation. European authorities are reviewing the vulnerability’s presence in other countries, and French policymakers are expected to consider stricter regulations for remote industrial-control access.