Hundreds of French supermarkets have been hit by a cyber attack that caused their fridges and freezers to heat up, spoiling fresh and frozen food estimated to be worth millions of euros. Hackers gained control of the software that regulates the temperatures of refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected.
Widespread Disruption Across Major Chains
The attack has impacted numerous major food retailers across France. Coopérative U’s chief executive, Dominique Schelcher, described the incident as “extremely serious and unprecedented,” with more than 100 of its supermarkets targeted. Intermarché and its Netto brand saw 180 stores affected, and another 100 shops were urgently disconnected from the internet to prevent further damage. Mousquetaires Group, owner of Intermarché and Netto, confirmed that some fresh and frozen food display units remained out of service, with affected products removed to avoid health risks.
Other significant chains also reported being hit, including Carrefour, where fridges in 80 of its 6,000 stores were hacked, and Monoprix, which stated 5% of its 400-plus stores had been affected. E.Leclerc was also impacted, with hackers reportedly managing to remotely trigger the forced defrosting of refrigeration systems in numerous branches, as reported by Yahoo Finance UK. The full scale of the attack is still unclear, but figures from individual chains suggest approximately 400 stores were affected out of around 15,000 nationwide.
Outdated Software Identified as Vulnerability
The cyber attack targeted software provided by Danish engineering firm Danfoss, which allows retailers to remotely manage their cold units. Danfoss confirmed that the affected cold units were older models whose security software could not be updated to address a risk they had identified. The firm stated it had “long advised” businesses to keep supported systems up to date and migrate legacy systems to current-generation solutions, with its AK-SM800 and AK-SC355 fridge regulator systems notably affected.
Investigations Underway and Wider Concerns Raised
French prosecutors have launched a specific cyber-crime investigation into what the Paris prosecutor’s office called a “large-scale cyber-attack.” The probe aims to identify victims and establish links between the reported damage, including foodstuff losses and the outbreak of small fires in some locations. European Food Commissioner Christophe Hansen condemned the hack, stating on X that “Food security requires more attention at all levels. Because the weaponisation of food has become a reality,” according to the BBC.
The office of French Prime Minister Sébastien Lecornu indicated that France’s national cybersecurity agency, ANSSI, has identified a vulnerability in the software supplied by Danfoss and is coordinating with European counterparts, as other countries may also be affected. The incident highlights growing concern across Europe about the potential havoc cyber-attacks by malicious actors can cause across various sectors. French President Emmanuel Macron had previously ordered measures to protect France’s critical infrastructure from what he termed Russian “hybrid attacks.” Antoine Hautin of cybersecurity consultancy Almond noted that affecting hundreds of units simultaneously demonstrated “a certain level of sophistication.”
FAQ
-
What caused the fridges to heat up?
Hackers gained control of the software that regulates the temperatures of refrigeration units in French supermarkets, forcing them to heat up.
-
Which supermarkets were affected?
Among those affected were Coopérative U, Intermarché, Netto, Carrefour, Monoprix, and E. Leclerc.
-
What was the estimated damage?
Food losses are estimated to be worth millions of euros, with two supermarkets in the Alsace region alone reporting combined losses of €270,000.
-
What company’s software was targeted?
The attack targeted refrigeration control software provided by Danish engineering firm Danfoss, specifically affecting older models running outdated firmware.
