A coordinated cyberattack on refrigeration control systems has disrupted hundreds of supermarkets across France, raising fridge and freezer temperatures to as high as 50 °C (122 °F). The intrusion forced defrost cycles that spoiled fresh and frozen products and triggered fires in several stores, prompting a nationwide emergency response.
Retailers most affected
Major chains confirmed the breach on Monday. Intermarché, including its Netto brand, reported that at least 300 outlets were targeted. Cooperative U said more than 100 of its stores were impacted, while Carrefour identified 80 affected supermarkets. Monoprix estimated that roughly five percent of its 490 locations suffered damage, and E Leclerc confirmed that several of its stores were also hit.
Financial impact and product loss
Intermarché chief executive Thierry Cotillard told BFM TV that the “unprecedented” attack could generate losses amounting to “tens of millions of euros nationwide in a single day.” The forced defrosting destroyed stocks of fresh and frozen goods, and the retailer warned that all perishable items in the compromised stores would have to be discarded. Cooperative U’s chief executive Dominique Schelcher described the targeting of essential food‑preservation equipment as “extremely serious and unprecedented,” adding that the company is working to restore normal operations.
Technical cause and vulnerability
French authorities, led by the National Cybersecurity Agency (ANSSI), traced the breach to a vulnerability in software supplied by Danish industrial firm Danfoss. The affected refrigeration units were running outdated firmware, a condition Danfoss said it had warned customers to correct. The firm confirmed awareness of incidents in France affecting a limited number of its refrigeration‑management systems.
Government and industry response
Prime Minister Sebastien Lecornu ordered ANSSI to investigate the “large‑scale” attack, and the Paris prosecutor’s office highlighted the impact on connected refrigerators across major food retailers. France is coordinating with European counterparts, as a source close to the prime minister indicated that other countries could face similar risks. The French retail federation (FCD) has called on Danfoss to provide full transparency about the flaw.
Potential wider fallout
Cyber‑threat analyst Felix Aïme of Sekoia Threat Detection reported that Spain, Portugal, Poland, Germany and Belgium have also experienced related incidents. Security experts note that while the scale of this attack is rare, the underlying vulnerability—remote access to internet‑connected equipment—is not unprecedented. Analyst Steven Lachance warned that future attacks could target critical infrastructure such as energy grids or hospitals if similar weaknesses are left unaddressed.
As some affected stores resume operations, the incident serves as a “global wake‑up call” for industries reliant on connected hardware. Stakeholders are urged to update firmware, replace obsolete devices and implement stronger network segmentation to mitigate the risk of remote exploitation.
Norman Pearlstine is the Executive Editor and Co-Founder at News Raise. With over two decades of experience across financial journalism, corporate governance, and market analysis, Norman leads the editorial direction and ensures strict adherence to journalistic accuracy and ethics.
