A cyberattack disrupted connected refrigeration systems at supermarkets in France, causing food losses and fires at some locations. Reports say attackers remotely triggered defrosting, allowing temperatures in some units to rise sharply. The French prosecutor’s office confirmed the incident affected several major food retailers and asked authorities to investigate.
TL;DR: The French attack affected supermarket refrigeration systems and spoiled food. Les Mousquetaires reported about 150 affected Intermarché stores, while Carrefour said 80 of its supermarkets were affected. Deutsche Welle cited retailers putting the total above 400. Reports describe some units reaching 50 degrees for more than six hours. Danfoss said affected units were running outdated firmware. A separate Ahold Delhaize security incident disrupted operations in the Netherlands and Belgium; sources said there was no known connection to the French attack.
What Happened to Supermarket Refrigeration in France?
The Irish Times, reporting Reuters, says the Paris prosecutor’s office described a large-scale attack affecting connected refrigerators at several major food retailers across France. Reported damage included food losses and fires. The prime minister asked France’s cybersecurity agency, ANSSI, to investigate.
Reports place the event overnight from Sunday into Monday. Deutsche Welle says hundreds of stores were affected and that frozen food spoiled after refrigeration systems were defrosted. The scale is reported differently by individual retailers and news outlets, so counts should remain attributed rather than treated as a single independently reconciled figure.
Which Supermarket Chains Reported Damage?
The Irish Times says Les Mousquetaires, the cooperative that owns Intermarché, reported that about 150 stores were affected. The company said it discarded food to avoid sanitary risks. The same report says Coopérative U’s chief executive confirmed that his supermarket group was targeted, while Carrefour said 80 of its supermarkets had been affected.
Deutsche Welle cited retailers as saying more than 400 stores were hit and named Coopérative U, Leclerc, Les Mousquetaires, and Intermarché. Coverage differs on the details: The Irish Times noted that Leclerc had not responded to its request for comment, while DW reported that Leclerc told AFP a cyberattack affected one of its refrigeration-equipment suppliers and had repercussions for systems in several stores. Those accounts should not be silently combined into a claim that every outlet independently confirmed the same list.
How High Did Temperatures Rise?
Reports say attackers remotely triggered defrosting in refrigeration systems. Deutsche Welle says some fully stocked fridges rose to 50°C for more than six hours; The Irish Times gives a similar temperature and duration for Les Mousquetaires stores.
Intermarché said it threw away food from affected stores to avoid sanitary risks. DW describes tons of spoiled frozen food. Both accounts identify discarded food as a direct consequence of the refrigeration disruption.
Were There Fires at Affected Stores?
Yes. The Paris prosecutor’s office, as quoted by The Irish Times, listed fires among the reported damage. Deutsche Welle also says fires were reported at some locations.
Both outlets place the fires among the consequences reported in connection with the French incident.
What Is Known About Danfoss and Outdated Firmware?
The Irish Times reports that the prime minister’s office said ANSSI had identified a vulnerability in software supplied by Danish company Danfoss. Danfoss said it was aware of incidents in France affecting a limited number of refrigeration-management systems. The company said the affected units “were running outdated firmware” and reiterated its advice to update supported systems and migrate legacy systems to current-generation solutions.
Were Dutch and Belgian Disruptions Part of the Same Attack?
The available reporting does not establish a connection. Help Net Security explicitly describes two separate disruptive cyberattacks: the French refrigeration incident and an unspecified security issue affecting Ahold Delhaize operations in the Netherlands and Belgium. It says there was no indication the incidents were connected.
DW also describes Ahold Delhaize’s security issue separately and says the company saw no connection to the French attacks. The Irish Times reported that the relationship was unclear. These reports do not support describing the events as one campaign across three countries, or attributing Dutch and Belgian delivery or pricing problems to the French incident.
What Role Is ANSSI Playing?
France’s prime minister tasked ANSSI with investigating the attack. The Irish Times reports that the prime minister’s office said the agency identified a vulnerability in software supplied by Danfoss. Deutsche Welle also reports that ANSSI was assigned to investigate.
What Does the Incident Mean for Food Security?
DW says the incident raised questions about food security across Europe and quotes the EU commissioner for agriculture saying food security requires more attention. In the French stores covered by these reports, the direct consequence was the loss of food kept in refrigeration systems whose temperatures rose.
Frequently Asked Questions
Which country was affected by the refrigeration attack?
The reported defrosting cyberattack affected supermarket systems in France. Separate Ahold Delhaize disruptions in the Netherlands and Belgium were not shown to be connected.
How hot did the supermarket fridges get?
Deutsche Welle reports that some units reached 50°C for more than six hours. The Irish Times gives a similar figure for Les Mousquetaires stores. Neither report says every affected fridge reached the same temperature.
Which retailers reported affected stores?
Reports name Les Mousquetaires and Intermarché, Coopérative U, and Carrefour; DW also lists Leclerc. The Irish Times and DW differ on some details, so the figures and statements above are attributed to the outlets that reported them.
Did outdated firmware cause the attack?
Danfoss said affected units were running outdated firmware. The reporting does not establish that this was the direct cause or describe the exact intrusion method.
Summary
Reports confirm a cyberattack on connected refrigeration systems at supermarkets in France, with food losses and fires at some locations. Les Mousquetaires reported about 150 affected Intermarché stores, Carrefour said 80 supermarkets were affected, and DW cited a total above 400 according to retailers. Some units reportedly reached 50 degrees for more than six hours. Danfoss said affected units ran outdated firmware, but the exact intrusion method remains unknown. Disruptions at Ahold Delhaize in the Netherlands and Belgium were reported as a separate security incident without a known link to the French attack.