Cyberattack on French supermarkets destroys food, sparks fires

Hackers remotely raise temperatures in refrigeration systems at hundreds of stores, causing millions in losses and raising food security concerns

By LineZotpaper
Published
Read Time2 min
Hundreds of French supermarkets were hit by an unprecedented cyberattack that targeted internet-linked refrigeration systems, causing tonnes of food to perish and, in some cases, sparking fires. The attacks, confirmed by retailers on Monday, raised temperatures in fridges and freezers to as high as 50 degrees Celsius (122F) overnight when shops were closed.

The attacks appeared to target refrigeration systems manufactured by Danish company Danfoss, according to France's government cybersecurity agency. The affected models include the AK-SM800 and AK-SC355. Hackers gained remote access and cranked up temperatures, spoiling millions of euros worth of food, retailers said. In some incidents, the heat caused fires or melted equipment.

French supermarket groups E-Leclerc, Intermarche, Carrefour, Monoprix and Cooperative U all reported being hit. Intermarche said at least 300 of its stores and its Netto brand were affected. Cooperative U reported more than 100 supermarkets targeted, while Carrefour said 80 supermarkets were affected and Monoprix said about 5 percent of its roughly 490 stores were hit.

French TV channel BFM reported that the attackers appeared to have remotely triggered a forced defrosting option. The cybersecurity agency has advised companies operating the affected freezer models to immediately disconnect them from the internet or restrict access, and to perform software updates. Authorities have launched an investigation, but it remains unclear who is behind the attacks.

§

Analysis

Why This Matters

  • The attack exposes critical vulnerabilities in the food supply chain, where internet-connected industrial systems lack basic security.
  • Spoiled food and fires cause direct economic losses for retailers and could lead to higher prices or shortages for consumers.
  • The incident highlights the broader risk of cyberattacks targeting physical infrastructure, potentially affecting other sectors reliant on similar refrigeration or industrial control systems.

Background

Refrigeration systems in supermarkets are increasingly connected to the internet for remote monitoring and management. Such systems, often running on older protocols, have become a target for hackers seeking to cause physical disruption. This attack on French retailers is one of the largest known to target food storage infrastructure directly, raising questions about the cybersecurity of industrial IoT devices.

Key Perspectives

Supermarket industry: Retailers face immediate financial losses and are now scrambling to disconnect vulnerable systems and implement patches. The attack forced closures or cleanup at hundreds of stores. Cybersecurity experts: The attack demonstrates that industrial control systems remain poorly secured, and that motivated attackers can cause real-world damage without needing sophisticated exploits—just internet access and knowledge of the system. Consumers: Shoppers may see some shortages or disposal of affected products, but the wider concern is the potential for repeat attacks that could disrupt food supply more broadly.

What to Watch

  • Whether authorities identify the attackers and their motive (ransom, activism, state-sponsored).
  • Danfoss's response and any security updates or recalls for the AK-SM800 and AK-SC355 models.
  • Whether other countries report similar attacks, indicating a coordinated campaign or copycat efforts.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workSubscribe