Cyber-attack cooks supermarket fridges across France, destroying thousands of tons of food

Shortly before midnight last Sunday, digital thermostats controlling cold aisles in hundreds of French supermarkets began to flicker and rise. Hackers had remotely pushed temperatures from as low as -27C to well over 50C, according to reports from affected stores. Over the next four to six hours, the food inside first defrosted, then slowly began to cook.

Shop staff arriving early to restock shelves reported catching a blast of hot air, like opening an oven, when they went to fill freezers. One supermarket in Normandy reported a number of its freezers had been pushed to 80C. In certain stores, the extreme heat triggered fires, setting off sprinklers and causing water damage.

Up to 700 stores were affected, including outlets from the Intermarché, Coopérative U, Carrefour, Leclerc and Monoprix chains. At one Intermarché in the Paris suburb of Issy-les-Moulineaux, workers described the attack as a catastrophe. “They pushed the freezers here up to 62C. Everything had to be thrown away. It was such a waste,” one shop worker said. Staff removed tons of spoiled food and worked until almost midnight on Monday to reorder and restock shelves. “Thankfully, we were able to get things almost back to normal the same day,” another worker added. “But we had to clear out everything in the freezers.”

No group immediately claimed responsibility for the attack, which has been described as bizarre and unprecedented. The incident is now under investigation.

Analysis

Why This Matters

The attack demonstrates that Internet-connected industrial and retail systems (thermostats, freezers) are vulnerable to remote compromise, with direct consequences for food safety and supply chains.
The scale of the attack – up to 700 stores across five major supermarket chains – caused massive food waste and operational disruption, highlighting the fragility of just-in-time retail logistics.
It raises urgent questions about how widely such IoT devices are deployed and what security standards protect them, especially in critical infrastructure roles.

Background

Cyber-attacks on physical infrastructure have risen in recent years, with targets including water systems, power grids and manufacturing plants. Supermarket refrigeration systems typically rely on digital thermostats connected to central management networks, allowing remote monitoring and adjustment. This attack exploited that connectivity to cause physical damage and product loss, a form of hybrid cyber-physical sabotage distinct from data-theft or ransomware incidents.

Key Perspectives

Supermarket chains and retailers: They face immediate financial losses from spoiled inventory and must restore operations quickly while investigating how their systems were breached. Long-term confidence in network-connected refrigeration may be shaken. The attackers: No group has claimed responsibility, and the method suggests either advanced persistent threat actors or skilled hacktivists willing to cause tangible harm to civilian infrastructure. Their identity and motive remain unknown. Cybersecurity experts and regulators: The incident will likely intensify calls for stricter security mandates on Internet-connected industrial equipment, particularly in the food supply chain, and for more rigorous segmentation of corporate networks from operational technology.

What to Watch

Whether authorities identify the perpetrators or any group claims responsibility.
Whether other retailers in France or abroad report similar intrusions or anomalies in their refrigeration systems.
Potential moves by French regulator ANSSI or the European Union to introduce binding security requirements for IoT devices in commercial refrigeration and cold chain logistics.

Analysis

Why This Matters

Background

Key Perspectives

What to Watch

Sources