Cyberattack on Legacy Refrigeration Controllers Disrupts French Supermarkets

A coordinated cyberattack targeting operational refrigeration control systems has disrupted hundreds of French supermarkets, forcing operators to discard inventory across fresh and frozen aisles. As reported by TechXplore (https://techxplore.com/news/2026-10-french-supermarkets-refrigerator-shutdown-unprecedented.html), major grocery networks including E. Leclerc, Intermarché, and Coopérative U confirmed that network intrusions altered temperature settings across their cooling infrastructure.

The incident affected at least 300 stores operating under Intermarché and its Netto discount brand, more than 100 Coopérative U branches, and multiple E. Leclerc locations. Broadcaster BFM TV reported that attackers gained remote access to trigger forced defrosting cycles, causing refrigerator temperatures to spike. Paris prosecutors confirmed a formal investigation into the widespread attack, noting that the disruption also sparked physical fires in certain facilities alongside extensive inventory losses.

The targeted hardware involves industrial refrigeration management systems from Danish manufacturer Danfoss. The vendor confirmed to AFP that the affected units were primarily legacy models, specifically its AK-SM800 and AK-SC355 regulator systems. Danfoss noted that these older systems use outdated firmware that no longer receives software or security patches, adding that it had previously advised customers to upgrade to modern hardware.

A source close to French Prime Minister Sébastien Lecornu stated that France's cybersecurity agency identified a software vulnerability in the Danish supplier's equipment and alerted the vendor. French authorities are collaborating with European counterparts to assess whether grocery chains in other countries are exposed, while working to identify other domestic operators using the legacy hardware.

Dominique Schelcher, chief executive officer of Coopérative U, characterized the incident as an unprecedented attack on essential food supply infrastructure, confirming that cooling disruptions began Sunday night. European Union Food and Agriculture Commissioner Christophe Hansen also condemned the attack, warning that the digital exploitation of food supply chains has become an operational reality.

Operational technology security specialists noted that the incident reflects risks tied to modernizing legacy equipment. Antoine Hautin of cybersecurity consultancy Almond explained that industrial refrigeration units, historically isolated from external networks, are increasingly connected through internet-facing sensors and remote management platforms. Hautin added that coordinating simultaneous failures across hundreds of units indicates a notable level of technical sophistication.