Hackers disrupt refrigeration systems at hundreds of French supermarkets
A cyberattack that forced defrost cycles on refrigeration units affected around 700 food retailers in France, causing water damage and spoiled goods, while authorities launch an investigation.
Around 700 grocery stores across France experienced water leaks and spoiled produce after hackers remotely accessed refrigeration controllers and activated defrost cycles, according to French media reports. The incident prompted an investigation by the Paris prosecutor's office and the national cyber agency ANSSI.
French Economy Minister Roland Lescure told lawmakers the attack was a “wake-up call for everyone,” emphasizing the need for stronger cybersecurity in supply chains. No individual or group has claimed responsibility, and investigators have not identified a ransom demand. Cybersecurity analyst Ken Munro suggested the motive may have been to cause mischief or public unease, while Félix Aimé of the firm Sekoia said the attackers’ intent remains unknown.
The compromised controllers were supplied by at least three manufacturers, including Denmark’s Danfoss, the U.S. firm Copeland and its subsidiary Dixell. Danfoss acknowledged that many affected units were running outdated software and urged customers to apply the latest firmware updates. Copeland identified a vulnerability in an end-of-life controller generation and is working with customers to mitigate the risk.
Security experts noted that the controllers had been exposed to the public internet, providing a large attack surface. Earlier reports had highlighted a flaw in Danfoss’s AK-SM 800A software that could bypass authentication, allowing temperature settings to be altered remotely. By overriding the defrost limits, the attackers caused temperatures to rise to as high as 50 °C for several hours, with some units even catching fire.
Major French retailers, including Carrefour, Monoprix, Les Mousquetaires and Coopérative U, reported disruptions, and similar incidents were reported in Spain, Portugal, Poland, Germany and Belgium. While consumer safety was not directly threatened, experts warned that such vulnerabilities underscore the importance of keeping industrial control systems off the public internet and ensuring proper oversight of outsourced security responsibilities.
The attack has intensified calls from European officials for enhanced cyber defenses. French President Emmanuel Macron recently urged the drafting of a new protection plan against cyber threats, and EU Agriculture Commissioner Christophe Hansen warned that the weaponization of food supplies is a growing concern.