Cyberattacks Heat French Supermarket Refrigerators to 50°C Causing Food Spoilage
Hackers manipulate commercial cooling systems across hundreds of French stores, disrupting supply chains.
1Widespread Cooling Sabotage
Cyberattacks on supermarket refrigeration systems across France pushed internal temperatures up to 50°C, spoiling massive quantities of perishable food. Major retail brands including Carrefour, Intermarché, Monoprix, and Coopérative U suffered severe stock losses. The targeted hardware managed critical pre-shelf storage units, causing empty produce aisles nationwide.
2Scale of French Retail Disruption
The disruption impacted hundreds of locations across the country. Groupement Les Mousquetaires reported approximately 150 affected Intermarché stores, while Carrefour confirmed 80 compromised locations. Monoprix noted five percent of its 490 stores were hit, and Coopérative U acknowledged incidents across 80 of its 2,000 retail supermarkets.
3Vulnerable Controller Infrastructure
Many affected retailers relied on industrial refrigeration controllers manufactured by Danish firm Danfoss. Security firm Claroty had previously documented critical vulnerabilities within the AK-SM 800A platform. These units featured a bypassable authentication mechanism generating access codes derived from the device date, allowing attackers administrative access without credentials.
4Remote Maintenance Exposure Risks
Retail operators connect industrial controllers directly to the public internet to enable centralized engineering teams to troubleshoot issues remotely and reduce maintenance overhead. Claroty noted that this convenience eliminates network isolation. Shodan scans revealed over 4,500 internet-facing Danfoss interfaces worldwide, with more than half located in France.
5Emergency Response and Advisories
French cybersecurity agency CERT-FR issued an urgent advisory warning of compromises across Danfoss AK-SM and AK-SC series controllers. The agency recommended disconnecting internet access, performing factory resets, rotating administrative credentials, and applying security patches. Danfoss maintained that the impacted supermarket systems had been running outdated, unpatched firmware.
6Anomalies in Attack Footprint
While Danfoss hardware featured prominently in the technical alerts, Coopérative U leadership stated the company does not use Danfoss controllers despite suffering 80 compromised stores. This discrepancy suggests either multiple distinct attack vectors were utilized or additional third-party industrial cooling vendors share similar unauthenticated remote vulnerabilities.
7Parallel Retail Cyber Incidents
Dutch retail conglomerate Ahold Delhaize simultaneously reported a separate cybersecurity incident impacting distribution systems across European brands. Although authorities have not confirmed a direct link to the French cooling sabotage, the incident forced retail websites offline, disrupted digital shelf labeling, and depleted fresh grocery inventories across regional branches.
8Physical Risks in Operational Technology
The incident demonstrates the severe physical risks associated with vulnerable operational technology managing core supply chains. Altering temperature thresholds not only ruined food inventories but also triggered isolated fires in French facilities. Securing physical industrial infrastructure requires enforcing strict network segmentation, closing public internet access, and mandating patch compliance.