A significant cyberattack occurred on Monday, disrupting the operations of numerous supermarkets in France and resulting in the loss of substantial quantities of perishable and frozen goods due to malfunctioning refrigeration units.
Malicious actors gained unauthorized remote access to systems controlling commercial cooling systems, triggering prolonged unfreezing cycles. As a result, temperatures in affected establishments soared to as high as 50 °C (122 °F), prompting the removal and disposal of perishable goods to mitigate potential health hazards.
A significant cyberattack took place overnight from October 11 to 12, targeting multiple prominent French television networks. Intermarché has confirmed that its retail stores were impacted by the incident, with Coopérative U describing the attack as unprecedented.
Preliminary estimates suggest a substantial number of establishments were impacted, with initial reports indicating that between 150 and 200 Intermarché locations and approximately 100 Coopérative U stores experienced difficulties. Further investigation revealed additional issues at Carrefour, Monoprix, and E. Leclerc locations.
Preliminary investigations suggest that approximately 300 establishments of the Intermarché and Netto group, around 100 of Coopérative U, approximately 80 of Carrefour, and about 30 of Monoprix may have been impacted, with E.Leclerc locations also potentially affected. The ongoing research may result in adjustments to these figures.
The supermarkets' critical infrastructure was not the primary focus of the cyberattack. Instead, the hackers targeted the networked controllers that oversee the temperature control and monitoring systems for refrigerators, freezers, and refrigerated display cases. These systems enable remote temperature management, alert notifications, and automated freezing cycles.
Equipment affected by the issue employs technology developed by Danfoss, a Danish-based company renowned for its expertise in cooling and air-conditioning solutions.
Preliminary investigations indicate that the attackers manipulated the freezing protocols, increasing the temperature and in some instances, extending the duration of the process by several hours.
A malfunctioning refrigerator unit at an Intermarché store in Gradignan, a suburb near Bordeaux, France, reportedly reached a critical temperature of 50 degrees Celsius, resulting in estimated losses of approximately 21,000 euros in spoiled food.
The Paris prosecutor's office is investigating a potential connection between the recent attack and several other incidents involving equipment damage and small fires caused by overheating at various establishments.
The integrity of the cold chain is compromised when perishable items like meat, fish, dairy products, or frozen goods are left at an improper temperature for an extended period. In such cases, retailers are unable to restore these products to a safe temperature for resale.
Intermarché has confirmed that it has removed and discarded fresh and frozen products from the affected branches.
Preliminary estimates indicate significant volumes of discarded goods, with potential losses reportedly exceeding several million euros, although a precise total has yet to be determined.
Attention is shifting to Danfoss systems installed in retail stores, with the company highlighting that many of the affected units are outdated products nearing the end of their operational lifespan and no longer receiving software or security updates. Danfoss has consistently advised customers to either maintain their systems with the latest updates or replace outdated equipment to ensure optimal performance and security.
The U.S. Cybersecurity and Infrastructure Agency (CISA) issued a warning in 2025 regarding a critical vulnerability impacting specific Danfoss AK-SM 8xxA series drivers, characterized as high-gravity.
The exact entry point used in the Monday attack remains unverified, and further investigation is needed to confirm the role of the identified fault.
A probe has been launched by the Paris Prosecutor's Office to identify those accountable and assess the full scope of the damage.
At this time, no official rescue request has been made public, and no specific team has been designated to undertake the operation.
The episode serves as a cautionary note, highlighting a broader vulnerability in physical infrastructure beyond French supermarkets. This includes a growing reliance on internet-connected devices, such as air conditioning systems, industrial plants, and supply chains.
A recent computer intrusion had far-reaching consequences, resulting in malfunctioning equipment that overheated freezers, spoiled perishable food, and prompted hundreds of stores to recall affected products from their shelves.