'Unprecedented' cyberattack disrupts refrigeration systems at hundreds of French supermarkets

Several major supermarket chains in France have reported a cyberattack that disrupted refrigeration systems across hundreds of stores, forcing retailers to discard fresh and frozen food. The incident has raised concerns about food safety and the growing vulnerability of essential infrastructure to cyber threats.

E Leclerc, Intermarche and Cooperative U confirmed the attack to AFP on Monday. At least 300 Intermarche and Netto outlets and more than 100 Cooperative U stores were affected, along with several E Leclerc branches.

French authorities have opened an investigation into the incident, which reportedly also affected other retail chains and was linked to fires.

How did the cyberattack affect supermarkets?

According to French broadcaster BFM TV, hackers "managed to remotely trigger the forced defrosting of the refrigeration systems in numerous stores". The disruption caused temperatures inside refrigeration units to rise, putting perishable food at risk.

Intermarche said affected branches would have to "throw away all of the products" that are fresh and frozen. The retailer condemned the resulting food waste and financial losses but did not disclose the scale of the damage.

E Leclerc said the attack targeted one of its refrigeration equipment suppliers, leading to "repercussions on the operation of refrigeration systems in several stores".

A source close to the matter said refrigeration control systems made by Danish manufacturer Danfoss were targeted.

Danfoss told AFP that most of the affected equipment consisted of "legacy" products that "no longer receive software or security updates". The company identified its AK-SM800 and AK-SC355 fridge regulator systems among the affected models and said a version of the AK-SM800 used outdated firmware. It added that it had previously advised supermarkets to upgrade the systems.

French authorities investigate the incident

France's cybersecurity agency identified a software vulnerability supplied by a Danish company and contacted the vendor, according to a person close to Prime Minister Sebastien Lecornu.

The source said the agency was working with European counterparts to determine whether other countries were affected. It was also seeking to identify other French businesses that could be at risk.

Cooperative U chief executive Dominique Schelcher described the incident as "unprecedented", saying the attack had affected refrigeration systems since Sunday night.

"Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is extremely serious and is unprecedented. It is unacceptable," he wrote on X.

The Paris prosecutor's office confirmed an investigation into "the large-scale cyberattack affecting the refrigerators of several major food retail chains across France". Investigators will seek to identify those affected and establish links between the attack, reported food losses and fires.

Concerns over attacks on critical infrastructure

The incident has renewed concerns about cyberattacks targeting essential services and industrial equipment. Refrigeration units that were once largely disconnected from the internet are increasingly linked through sensors and remote monitoring systems.

Antoine Hautin of cybersecurity consultancy Almond told AFP that the likely simultaneous impact on hundreds of units indicated "a certain level of sophistication".

The attack comes amid wider European concerns about hybrid threats. French President Emmanuel Macron ordered measures last month to protect the country's critical infrastructure from Russian "hybrid attacks".