Cyberattack on Connected Supermarket Refrigerators Inflicts Massive Losses Across France
Hackers manipulated temperature controls in major grocery chains, spoiling millions in inventory.
1Widespread Cold Chain Breach
A coordinated cyberattack targeted connected refrigeration systems across major French supermarket chains, including Carrefour, Monoprix, Les Mousquetaires, E. Leclerc, and Coopérative U. By deliberately altering temperature settings, hackers forced stores nationwide to discard massive amounts of spoiled perishable inventory to protect consumer safety.
2Severe Direct Operational Impact
The operational disruption hit multiple retail networks simultaneously. Carrefour reported roughly 80 impacted stores, while Monoprix noted disruptions across 5% of its 490 locations. Les Mousquetaires saw cooling units in approximately 150 locations heated up to 50 degrees Celsius for six consecutive hours.
3Millions in Inventory Losses
Supermarket operators were forced to destroy all compromised food products immediately. While complete tallies remain pending, industry analysts estimated losses at upwards of 10 million euros. Intermarché CEO Thierry Cotillard noted nationwide daily financial damages likely reached tens of millions of euros.
4Exploiting Legacy Hardware Architecture
Investigators revealed that the attackers targeted cooling control systems manufactured by Danish industrial firm Danfoss. Danfoss stated that the impacted units were legacy products that no longer receive software updates or patches, emphasizing that outdated firmware had left these operational technology systems exposed.
5State Security Agencies Mobilize
The Paris prosecutor's office launched an official investigation into the incident, characterizing it as a large-scale offensive. French Prime Minister Sébastien Lecornu instructed the National Cybersecurity Agency, ANSSI, to lead technical inquiries after identifying a specific software vulnerability within the Danish supplier's ecosystem.
6Operational Technology Blind Spots
This breach highlights critical security vulnerabilities residing within physical facilities and connected operational technology. Unlike conventional IT systems, legacy industrial cooling networks frequently lack automated patching mechanisms. These blind spots leave distributed physical infrastructure highly vulnerable to remote tampering and physical destruction.
7Weaponization of Food Supply
European officials emphasized the broader systemic risks to essential societal infrastructure following the breach. European Union Commissioner for Agriculture and Food Christophe Hansen publicly condemned the operation, warning that cyberattacks against retail cooling networks represent a dangerous evolution in the weaponization of critical food supplies.
8Mandating Infrastructure Firmware Upgrades
The incident demonstrates how supply chain hardware vulnerabilities directly disrupt consumer-facing operations. Retailers must now accelerate comprehensive audits of operational technology assets. Eliminating outdated connected equipment, enforcing strict network segmentation, and securing third-party vendor access controls are becoming urgent operational imperatives across the retail sector.