Hundreds of French supermarkets faced significant losses after a cyberattack compromised refrigeration systems, causing extensive thawing of perishable goods. Retail chains including Cooperative U, Leclerc, Les Mousquetaires, and Intermarche were affected, with hackers remotely defrosting thousands of freezer and refrigerator units.
The attack, which took place overnight, forced some refrigerators to heat to as high as 122 degrees Fahrenheit for over six hours, resulting in spoiled stock and evacuations. Prosecutors in Paris confirmed multiple fires had been reported in some locations related to the attack.
This widespread disruption comes after officials identified vulnerabilities in the refrigeration technology provided by Danish supplier Danfoss. The compromised units were reportedly operating on outdated firmware, according to Danfoss, which has urged customers to update and migrate to current-generation systems.
Details of the Cyberattack and Impact
Retailers estimate that over 400 supermarket stores across France were targeted. Intermarche noted affected stores had to discard all fresh and frozen products due to spoilage. Meanwhile, Leclerc reported that the incident traced back to a cyberattack on one of its refrigeration equipment suppliers, which resulted in multiple affected stores experiencing refrigeration failures.
Authorities are investigating the extent of the attack, with France’s national cybersecurity agency, ANSSI, leading the probe and coordinating with European partners. Similar security concerns were raised in Belgium, Luxembourg, and the Netherlands, although Dutch supermarket chain Ahold Delhaize reported taking precautionary measures independently and saw no link to the French breaches.
Source of Vulnerability and Ongoing Investigation
French officials point to software vulnerabilities in systems from Danfoss as the entry point for the hackers. Danfoss acknowledged incidents in France but emphasized affected systems were running unsupported firmware versions. The supplier has stressed the importance of updating and upgrading refrigeration systems to avoid such risks.
No group or individual has claimed responsibility for the attack, and the motivation behind it remains unclear at this time. Security authorities are investigating potential cross-border ramifications given reported issues in neighboring countries.
Broader Concerns Over Food Supply Security
This incident highlights growing concerns about the vulnerability of critical infrastructure to cyberattacks, including those targeting the food supply chain. French officials have previously stressed the need to protect essential services amid geopolitical tensions and rising hybrid threats.
Industry leaders have called for heightened attention to food security in light of these developments. The event underlines the increasing reality that food supply systems can be exploited through cyber means, prompting calls for improved cybersecurity measures across the sector.
