Full Breakdown
French Supermarket Refrigeration Systems Hit by Large-Scale Cyberattack
By Drooid · · How we work
Core Event: Temperature Override Across Hundreds of Stores
Late Sunday night, digital thermostats that control freezers, fridges and chiller cabinets in French supermarkets were remotely set to extreme temperatures. Units that normally run as low as -27 °C were driven above 50 °C, with some reported reaching 80 °C. The temperature rise persisted for four to six hours, causing food to defrost, then cook, and in several locations igniting fires that activated sprinkler systems.
Background & Context
Connected refrigeration units are supplied by manufacturers such as the Danish firm Danfoss, which enables remote maintenance and alerts. Danfoss disclosed that many of the compromised units were running outdated firmware and, in some cases, default passwords. Security flaws identified by Danfoss last year had been recommended for update or replacement, but many retailers had not applied them.
Key Figures & Groups
- Dominique Schelcher – President, Coopérative U.
- Gérôme Billois – Partner, Wavestone.
- Marta Rybczynska – Cybersecurity specialist.
- Thierry Cotillard – CEO, Intermarché.
- Sébastien Lecornu – Prime Minister of France.
- Christophe Hansen – European Commissioner for Agriculture and Food.
- ANSSI – France’s National Cybersecurity Agency.
Timeline
- October 12, 2026 – Hackers altered refrigeration controls, raising temperatures across dozens of stores.
- Later that night – French prosecutors opened a large-scale cyber-attack investigation; Prime Minister Lecornu tasked ANSSI with the inquiry.
- Following days – Retailers began removing spoiled food, restocking shelves and assessing damage.
Data & Statistics
- Up to 700 supermarkets were affected, including stores from Intermarché, Coopérative U, Carrefour, Leclerc and Monoprix.
- 80 of Coopérative U’s 2,000 locations reported intrusion; 150 Intermarché stores and 80 Carrefour outlets confirmed damage.
- Temperature spikes ranged from -27 °C to over 50 °C, with isolated reports of 80 °C.
- Fires triggered sprinklers in several stores, causing additional water damage.
- Estimated financial loss could reach tens of millions of euros, according to Intermarché’s CEO.
Official Statements & Responses
- Dominique Schelcher confirmed the attack on his network and said his teams were working with refrigeration technicians to restore service.
- Sébastien Lecornu directed ANSSI to lead the investigation and announced coordination with European counterparts.
- Christophe Hansen condemned the assault on food supplies, calling it “instrumentalisation de l’alimentation.”
- ANSSI reported that, in addition to Danfoss-based controllers, units from two other manufacturers were also targeted.
- Intermarché spokesperson noted that all affected products were removed from display and that a full list of impacted stores was not available.
- Danfoss reiterated its recommendation for firmware updates or replacement.
On-the-Ground Reports
One worker at an Intermarché in Issy-les-Moulineaux called the incident “a catastrophe.” Staff remained on site until nearly midnight to clear spoiled goods and begin restocking.
Conflicting Reports & Gaps
- French officials have not identified the perpetrators; speculation from Billois mentions possible state actors such as Iran or Russia, but no evidence has been presented.
- Dutch retailer Ahold Delhaize reported a separate “security issue” and temporarily shut down systems, but it remains unclear whether these problems are linked to the French attack.
What’s Next
Prime Minister Lecornu’s office indicated that ANSSI will continue its investigation and that France is coordinating with European partners to evaluate potential risks to other critical infrastructure. Retailers are expected to audit and upgrade refrigeration firmware in the coming weeks.