Major supermarket chains across France were hit by a cyberattack on Monday that disrupted refrigeration systems, forcing stores to discard fresh and frozen food. The incident affected hundreds of outlets and raised concerns about the vulnerability of essential food-storage infrastructure to digital threats.
Retailers including E. Leclerc, Intermarché and Coopérative U confirmed that their stores had been targeted. According to reports by Agence France-Presse (AFP), the disruption began on Sunday night and affected refrigeration equipment across multiple locations.
Hackers Allegedly Triggered Remote Defrosting
French broadcaster BFM TV reported that hackers had remotely activated the forced defrosting function in refrigeration systems at numerous stores. The disruption caused temperatures to rise, threatening the safety and quality of perishable products.
Intermarché confirmed that several affected outlets had to dispose of fresh and frozen food. At least 300 Intermarché and Netto stores, more than 100 Coopérative U outlets and several E. Leclerc stores were reportedly affected, according to statements provided to AFP.
Reports also suggested that Carrefour Market and Monoprix stores may have been targeted, although the two chains had not confirmed their involvement at the time of reporting.
Coopérative U chief executive Dominique Schelcher described the incident as unprecedented, expressing concern about the targeting of equipment essential to preserving food supplies.
European Union Commissioner for Agriculture and Food Christophe Hansen also condemned the attack, warning that threats to food security required greater attention.
Outdated Refrigeration Systems Under Scrutiny
The refrigeration controls involved were reportedly manufactured by Danish company Danfoss. According to AFP, equipment from older product generations was among the systems affected.
Danfoss stated that much of the equipment involved belonged to an older generation that no longer received software or security updates. The company identified its AK-SM800 and AK-SC355 refrigeration control systems among the affected equipment and said that a version of the AK-SM800 was operating outdated firmware.
The manufacturer said it had previously recommended that supermarkets transition away from these models. However, it did not disclose the total number of refrigeration control systems affected by the incident.
The attack has highlighted the risks associated with maintaining older connected equipment without regular security updates, particularly when it controls essential infrastructure such as commercial refrigeration.
French Authorities Launch Investigation
Paris prosecutors confirmed that an investigation had been launched into the cyberattack. Reports also indicated that fires had occurred, although further details about their connection to the incident were not immediately available.
According to a source close to French Prime Minister Sébastien Lecornu, France’s national cybersecurity agency had identified a vulnerability involving software supplied by a Danish company and had contacted the vendor.
The agency was also coordinating with European counterparts to determine whether similar systems in other countries could be affected.
Food Security and Cybersecurity Concerns Grow
The incident has drawn attention to the growing risks posed by cyberattacks against systems that support everyday essential services. Unlike attacks targeting customer information or payment networks, this incident reportedly affected the physical operation of refrigeration equipment, directly threatening stored food.
For supermarkets, refrigeration failures can lead to significant financial losses, food waste and potential public-health concerns if products are not handled appropriately.
The investigation is expected to examine how the attackers accessed the systems, the extent of the disruption and whether the same vulnerability affects other retailers or countries. The incident also reinforces the importance of updating legacy equipment, strengthening access controls and protecting connected industrial systems against cyber threats.
