Cyberattack on French Supermarket Refrigeration Systems Causes Major Food Waste

Attackers remotely defrosted refrigerators at hundreds of stores, prompting investigation

By LineZotpaper

Published13 October 2026

Updated13 October 2026

Read Time2 min

Sources3 outlets

A cyberattack over the weekend remotely defrosted refrigerators at multiple French supermarket chains, affecting between 250 and 350 stores and causing significant food spoilage. The attack targeted Danfoss refrigeration controllers, and the Paris prosecutor's office has opened an investigation into what it described as a large-scale cyberattack.

Attackers remotely defrosted refrigerators at several major French supermarket chains overnight on Sunday in a cyberattack that reportedly targeted Danfoss refrigeration controllers. Victims include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, with French media reporting that the attack affected between 250 and 350 stores, causing significant financial losses and food waste.

The threat actors hijacked refrigeration controllers running older versions of Danfoss control software and used them to raise supermarket refrigerator temperatures by triggering a built-in automatic defrosting system.

Coopérative U president Dominique Schelcher confirmed the incident and said that the attack affected multiple stores in the chain. "I can confirm that, since last night, a cyberattack has been affecting the refrigeration systems in several stores within our @CooperativeU network. Our teams are fully mobilized, working alongside refrigeration specialists, to resolve the situation as quickly as possible. An investigation will be conducted to shed full light on this attack," Schelcher said on social media. "Targeting equipment essential for preserving fresh produce and supplying food to the French people is an extremely serious matter and is unprecedented. It is unacceptable."

EU agriculture and food commissioner Christophe Hansen also condemned the attack and named France's largest supermarket chain, Leclerc, as one of the victims.

The Paris prosecutor's office has told AFP that it has opened an investigation into "the large-scale cyberattack affecting the refrigerators of several major food retail chains across France" to "identify the victims and establish the link with the damage they reported in terms of foodstuff losses and the outbreak of fires."

While no information is available on how the attackers were able to compromise the Danfoss refrigeration controllers, the US Cybersecurity and Infrastructure Security Agency (CISA) warned in May 2025 of a high-severity authentication bypass vulnerability (CVE-2025-41450) in the Danfoss AK-SM 8xxA Series hardware platform used to manage refrigeration and

Analysis

Why This Matters

The attack disrupted the cold chain for fresh produce, leading to significant food waste and financial losses for major retailers.
It highlights the vulnerability of industrial control systems (ICS) in critical commercial infrastructure, beyond traditional IT environments.
The incident may prompt stricter cybersecurity regulations for retail refrigeration and similar operational technology networks.

Background

Industrial control systems like those used in supermarket refrigeration have increasingly become targets for cyberattacks. These systems often run legacy software with known vulnerabilities, as seen here. In May 2025, CISA warned of a high-severity authentication bypass vulnerability (CVE-2025-41450) in Danfoss AK-SM 8xxA Series controllers, the type reportedly involved in this attack. While no official link has been confirmed, the timing raises questions about whether patches were applied.

Key Perspectives

Supermarket chains: Suffered immediate operational disruption and financial loss from spoiled stock. They are cooperating with authorities and working to restore systems. Cybersecurity experts: Likely to point out that connecting aging ICS equipment to networks without proper segmentation exposes critical systems to remote compromise. This attack may accelerate calls for better security practices in retail. French authorities: Have opened a criminal investigation. The Paris prosecutor's office is seeking to identify victims and establish the link between the attack and reported damage, including fires.

What to Watch

Identification of the attackers and their motive (ransomware, sabotage, or activism).
Whether Danfoss releases patces or advisories in response to the incident.
Potential for new EU or French regulatory requirements for cybersecurity of refrigeration and other industrial control systems in retail.

Sources

Hackers heat French supermarket fridges, sparking fires and food losses — Hacker News: Front Page
Cyberattack shuts down refrigerators at French supermarkets — BleepingComputer
French supermarkets suffer fridge shutdown after 'unprecedented' cyberattack — Hacker News: Front Page