Cyberattack Disrupts Refrigeration Systems at French Supermarkets
Summary
Attackers remotely triggered defrosting in supermarket refrigeration systems, affecting an estimated 250 to 350 stores across several French chains and causing food waste. Authorities have opened an investigation; the attack method is not yet known.
Key points
- Attackers reportedly hijacked refrigeration controllers overnight and raised refrigerator temperatures by triggering their automatic defrost systems.
- French outlets reported that 250 to 350 stores were affected, including locations operated by Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U.
- Intermarché said it removed products from affected units as a precaution; Coopérative U confirmed an impact on several stores.
- The Paris prosecutor's office opened an investigation to identify victims and examine reported food losses and fires.
- The method used to compromise the controllers is unknown. The article does not establish a connection to the Danfoss vulnerability CVE-2025-41450.
- A researcher found 2,752 Danfoss systems exposed online, including 1,590 in France.
- Ahold Delhaize separately reported taking some systems offline after a cybersecurity incident; no connection to the French supermarket attack was established.
Article Details
- Victim Organization
- Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U
- Incident Type
- Cyberattack on supermarket refrigeration controllers, reportedly triggering automatic defrosting and raising refrigerator temperatures.
- Disclosure Date
- 2026-10-12
- Operational Impact
- French outlets reported that 250 to 350 stores were affected. Some fresh and frozen food display units were out of service; stores removed products from affected units. The attack reportedly caused food waste and significant financial losses. The Paris prosecutor's office said it was investigating reported foodstuff losses and fires.
- Claim Status
- confirmed
CVE
People
Baptiste RobertPredicta Lab CEO who reported finding 2,752 Danfoss systems exposed online, including 1,590 in France.Christophe HansenEU agriculture and food commissioner who condemned the attack and identified Leclerc as a victim.Dominique SchelcherCoopérative U president who confirmed that the attack affected several stores in the chain.
Vendors
Products
Danfoss AK-SM 8xxA Seriesin May 2025 of a high-severity authentication bypass vulnerability (CVE-2025-41450) in the Danfoss AK-SM 8xxA Series hardware platform used to manage refrigeration and HVAC systems typically found in the foodDanfoss control softwareThe threat actors hijacked refrigeration controllers running older versions of Danfoss control software on Sunday night and used them to raise supermarket refrigerator temperatures by triggering a built-in automaticDanfoss refrigeration controllersAttackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers.