French Supermarkets Hit by Cyberattack as Hackers Overheat Fridges, Triggering Fires and Millions in Food Losses

Hundreds of supermarkets across France have suffered what industry executives describe as an “unprecedented” cyberattack that forced refrigeration temperatures to soar as high as 50 degrees Celsius (122F), spoiling massive quantities of food and triggering fires at several locations. Major retailers including Intermarche, Cooperative U, E Leclerc, Carrefour, and Monoprix confirmed on Monday that hackers had remotely triggered forced defrosting of their refrigeration systems. The attack raises serious concerns about critical infrastructure vulnerabilities and food security across Europe, with authorities warning that other countries may also be affected.

The Paris prosecutor’s office characterized the incident as a “large-scale” attack affecting connected refrigerators in several major food retailers across France. Reported damage includes significant food losses and multiple fires sparked by the overheated equipment. Prime Minister Sebastien Lecornu immediately ordered France’s National Cybersecurity Agency (ANSSI) to launch a full investigation into the breach. A source from the prime minister’s office confirmed that France was coordinating with European counterparts because other countries could also be affected, while authorities work to assess whether additional French companies remain at risk.

Scale of the Attack Affects Major Retail Chains

The scope of the cyberattack proved extensive, with at least 300 shops of Intermarche or its Netto brand targeted, along with more than 100 Cooperative U outlets. Carrefour reported that 80 supermarkets were affected, while Monoprix said approximately 5 percent of its roughly 490 stores were hit. E Leclerc confirmed that several of its stores were also targeted in the coordinated attack. According to BFM TV, the hackers managed to remotely trigger the forced defrosting of the refrigeration systems in numerous stores, resulting in what the network described as the destruction of stocks of fresh and frozen products.

Les Mousquetaires, which owns retailer Intermarche, said about 150 of its stores had been hit, with fridges heated up to 50C for six hours. A spokesperson confirmed the company had thrown all the food away to avoid any health risks to consumers. Intermarche told AFP that affected stores would have to “throw away all of the products” that were fresh or frozen, representing a catastrophic loss for the retailers involved.

Tens of Millions in Losses Expected Nationwide

While no immediate estimate of industry-wide losses was available, Intermarche CEO Thierry Cotillard told BFM TV that the attack would represent losses amounting to “tens of millions of euros nationwide in a single day”. The financial impact extends beyond immediate product losses to include potential damage to refrigeration equipment, cleanup costs, and lost sales during store closures or reduced operations. Dominique Schelcher, chief executive of Cooperative U, emphasized the gravity of the situation in a statement posted on social media platform X.

“Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented,” Schelcher wrote on X.

The attack prompted a strong response from EU food and agriculture commissioner Christophe Hansen, who condemned the incident on X and warned that such exploitation of food systems was now a reality requiring urgent attention.

Vulnerability in Danish Equipment Identified

A person close to French Prime Minister Sebastien Lecornu revealed that ANSSI had already identified a vulnerability in software supplied by a Danish company and had contacted the vendor. A source close to the issue said refrigeration control systems from Danish manufacturer Danfoss were specifically targeted in the attack. Danfoss confirmed in a statement to AFP that most of the affected equipment consisted of “legacy” products which “no longer receive software or security updates”.

The manufacturer said its AK-SM800 and AK-SC355 fridge regulator systems were notably affected, with a version of the former using “outdated firmware”. Danfoss added that it had long advised supermarkets to update from those models but did not provide specific figures on how many systems were compromised. The revelation highlights a critical weakness in critical infrastructure: the continued use of outdated, unsupported systems vulnerable to exploitation.

Potential Spread Beyond France

E Leclerc confirmed to AFP that a cyberattack affected one of its refrigeration equipment suppliers, resulting in repercussions on the operation of refrigeration systems in several stores. France’s cybersecurity agency was actively liaising with European counterparts to identify other potentially affected companies, as the widespread use of Danfoss equipment across Europe raised concerns about similar attacks in neighboring countries. The attack may not have been confined to France, as Dutch supermarket company Ahold Delhaize said it was also dealing with a “security issue” in its network and had taken several systems offline to protect them.

Stores of its Albert Heijn chain, the largest supermarket chain in the Netherlands with several stores in Belgium, remained open in both countries. However, its online app and delivery system were down, while electronic price tags often displayed incorrect information. It remained unclear whether any direct link existed between the French supermarket attack and the problems flagged by Ahold Delhaize. Delhaize supermarkets, also part of Ahold Delhaize but operating in Belgium and Luxembourg, were also affected by the security issue, Belgian media reported.

Food Security Concerns Raised

The attack has elevated concerns about food security vulnerabilities in an increasingly connected retail infrastructure. Commissioner Hansen’s statement that “food security requires more attention at all levels” reflects growing awareness that critical supply chains face evolving cyber threats. The incident demonstrates how hackers can weaponize internet-connected devices in retail environments to cause physical damage, financial losses, and potential public health risks. French authorities continue to investigate whether additional sectors or companies remain vulnerable to similar attacks, while working to strengthen defenses across critical infrastructure networks.