Hundreds of French supermarkets experienced a coordinated cyber attack that compromised refrigeration systems, causing fridges and freezers to malfunction and warm to dangerous temperatures overnight. The incident resulted in the destruction of perishable goods valued at millions of euros across multiple retail chains, prompting an investigation by French authorities and raising concerns about the vulnerability of critical food supply infrastructure.
The attackers gained unauthorized access to software controlling refrigeration units, forcing temperatures to climb to 50C (120F) in affected stores. According to reporting on the incident, the attack targeted Danfoss refrigeration controls, with older software versions predating version 4 appearing to be vulnerable. The assault reportedly exploited a continuous defrost function within the systems.
Coopérative U, one of France's major supermarket operators, confirmed that more than 100 of its Super U branded stores were targeted by what its chief executive Dominique Schelcher described as an "extremely serious and unprecedented" attack. At least 300 locations operated by Intermarché and its Netto subsidiary were also compromised, according to the AFP news agency. Reports in specialist retail and local media indicated that stores operated by other major chains—including Carrefour, E.Leclerc, and Monoprix—sustained similar damage, though these retailers had not yet publicly confirmed the extent of their involvement.
Staff members arriving at affected stores on Monday morning reported encountering waves of hot air when opening freezer units. A French broadcaster published imagery showing a freezer in an ice cream section displaying a temperature of 26.5C, far above the safe range for frozen products. Intermarché disclosed that its refrigeration units had remained at 50C for six hours overnight into Monday, forcing the retailer to discard all compromised inventory to prevent health risks.
What are the financial losses?
The financial impact of the attack extends into the millions of euros. Two supermarkets in the Alsace region alone reported combined losses of €270,000 (£228,000). More granular figures emerged from additional reporting, with a store in Haguenau estimating its frozen-stock loss at €50,000, while a nearby Super U location reported losses of €220,000. Given the scale of the attack across multiple chains and hundreds of locations, the nationwide total is expected to reach several million euros when fully calculated.
How are retailers responding?
Retailers have mobilized crisis response teams to stabilize systems and support affected stores. According to reports, retailers have coordinated with refrigeration specialists to restore normal operations and help stores prioritize replacement orders for damaged inventory. Coopérative U's chief executive stated that staff were
"fully mobilised, in co-ordination with refrigeration specialists, to restore the situation as quickly as possible"and called for a thorough investigation into the incident, characterizing the targeting of equipment essential to France's food supply as
"unacceptable".
What is the official response?
The Paris prosecutor's office has opened a formal investigation into the incident, describing it as a
"large-scale cyber-attack affecting the refrigerators of several major food retail chains across France". European Food Commissioner Christophe Hansen condemned the attack in a statement on social media, warning that
"Food security requires more attention at all levels. Because the weaponisation of food has become a reality."His remarks underscore growing concerns about the targeting of critical infrastructure that underpins national food supplies.
What happens next?
A crisis meeting between Danfoss and refrigeration contractors, including Axima, was scheduled for Monday at 11:00 to coordinate the response and develop remediation strategies. The investigation by French prosecutors is ongoing, and the full scope of the attack remains unclear. Authorities and industry partners are working to determine whether a software vulnerability played a role in the breach and to implement safeguards preventing similar incidents.
Key Facts
- More than 100 Super U stores, at least 300 Intermarché and Netto locations, and stores from Carrefour, E.Leclerc, and Monoprix were affected by the attack
- Refrigeration units reached 50C (120F) for up to six hours overnight, forcing retailers to destroy all affected perishable inventory
- Two supermarkets in Alsace reported combined losses of €270,000, with nationwide losses expected to reach several million euros
- The attack targeted Danfoss refrigeration control systems, with older software versions appearing vulnerable
- The Paris prosecutor's office has launched an investigation into the incident
