France: A major cyberattack targeting refrigeration systems at hundreds of supermarkets across France has caused significant food losses, with temperatures in some fridges and freezers reportedly rising to 50 degrees Celsius.
The incident also triggered fires at several stores, prompting French authorities to launch an investigation into the attack and assess potential risks to other businesses.
Major retailers, including Intermarché, Coopérative U, E.Leclerc, Carrefour and Monoprix, confirmed the incident, describing it as an unprecedented attack on connected refrigeration systems. According to reports, at least 300 Intermarché and Netto outlets were targeted, along with more than 100 Coopérative U stores. Carrefour reported disruptions at 80 supermarkets, while Monoprix remarked that around 5 percent of its approximately 490 stores were affected. E.Leclerc also confirmed that several of its outlets had been targeted.
The Paris prosecutor’s office stated that the large-scale cyberattack affected connected refrigerators at several major food retailers across the country, resulting in food spoilage and fires. French Prime Minister Sébastien Lecornu ordered the National Cybersecurity Agency of France (ANSSI) to investigate the incident. Authorities are also coordinating with European counterparts to determine whether businesses in other countries have been affected and assess potential risks to additional French companies.
Cyberattack causes millions in food losses
Intermarché emphasised affected outlets would have to discard all spoiled fresh and frozen products. Dominique Schelcher, chief executive of Coopérative U, noted that the disruption had affected refrigeration systems. He described the incident as extremely serious, highlighting the importance of refrigeration equipment in preserving fresh food and maintaining the country’s food supply.
Retailers highlighted their teams were working to restore normal operations, while investigations are expected to establish the full circumstances of the attack. France’s retail federation, known as the FCD, has also called on Danish technology company Danfoss to provide full transparency regarding the incident.
Outdated software under investigation
French cybersecurity authorities reportedly identified a vulnerability in refrigeration management software supplied by Danfoss. The company confirmed that it was aware of incidents in France involving a limited number of refrigeration management systems, adding that the affected units were running outdated firmware.
Danfoss highlighted that it had long advised customers to keep their systems updated and replace older equipment. The incident follows cybersecurity firm Claroty’s research, published on August 9, which highlighted vulnerabilities in Danfoss systems that could potentially allow attackers to bypass authentication measures.
Refrigeration systems in supermarkets are commonly managed through connected control panels that regulate multiple fridges and freezers. Internet connectivity allows maintenance teams to monitor and adjust equipment remotely, but it can also expose these systems to cyber threats if vulnerabilities remain unaddressed.
European cybersecurity concerns grow
The incident has raised wider concerns about the cybersecurity of essential infrastructure, including food distribution networks. While supermarkets face substantial losses from spoiled products, experts warn that similar vulnerabilities could potentially be exploited against more critical services, such as energy infrastructure and hospitals.
The attack has renewed calls for stronger national and international cybersecurity measures to protect connected industrial equipment, improve software security and reduce the risks posed by outdated systems.
MOST READ | Sydney faces extreme fire danger as temperatures set to hit 37°C
