Cyber — 2026-10-13

Hackers Raise French Supermarket Fridge Temperatures to 50C Causing Fires and Food Losses Across Hundreds of Stores

BLUFExposed industrial refrigeration controllers gave attackers a scalable weapon against food supply chains, and public attribution to a named actor is unlikely by October 31.

The Paris prosecutor's office said Monday that a "large-scale" attack hit connected refrigerators at several major French food retailers, causing food losses and fires 12. Retailers told AFP that at least 300 Intermarché or Netto shops and more than 100 Coopérative U outlets were targeted, while Carrefour reported 80 stores and Monoprix about 5 percent of its roughly 490 2. Intermarché's CEO told BFM TV losses would reach "tens of millions of euros" in a day 12. A source in Prime Minister Lecornu's office told Reuters that ANSSI, tasked with investigating, found a vulnerability in Danfoss software; Danfoss said affected units ran outdated firmware 12. Sekoia's Felix Aime said Spain, Portugal, Poland, Germany and Belgium were also affected, and attackers remain unidentified 13.

Analysis
French or EU authorities, or a government-attributing statement, are unlikely to publicly name a state or criminal actor behind the refrigeration attack by October 31. Confidence is high because reporting consistently shows no claim of responsibility and the entry route, whether exposed remote access, stolen credentials or unpatched firmware, remains unconfirmed. Four secondary outlets carry the story without a primary document, but each draws on different retailers, officials and companies, so the core facts hold. ANSSI must first separate exploitation of the Danfoss flaw from opportunistic scanning, and Claroty's August 9 disclosure gave any capable actor a roadmap. A state-linked group testing disruptive capability against supply chains could still be responsible, and Paris might attribute quickly to signal deterrence. Absent attribution, retailers should treat this as a patching problem: inventory internet-reachable legacy controllers, and expect copycat activity among Danfoss customers in neighboring countries.
5 sources
  1. Hackers heat French supermarket fridges, sparking fires and spoiling food - CNN
  2. Hundreds of supermarkets in France hit by 'unprecedented' cyberattack - Al Jazeera
  3. Hackers Heat Supermarket Fridges to 50°C in France Cyberattack - HackRead
  4. Cyberattack on French Supermarkets Overheats Fridges, Triggers Fires and Food Losses - Modern Diplomacy
  5. Une cyberattaque coupe le froid dans plusieurs supermarchés (Intermarché, U, Market, Monoprix, Leclerc concernés) - Je Bosse en Grande Distribution

View in full brief →

UNCLASSIFIED // OPEN SOURCE