Cyberattack Disrupts Supermarket Refrigeration Across France, Spoiling Food

Summary

A cyberattack disrupted Danfoss refrigeration systems at supermarkets across France, spoiling food and damaging equipment. Attackers reportedly extended defrost cycles; the attackers remain unidentified, and CERT-FR recommends restricting access and resetting affected,с

Key points

• The overnight attack on October 11–12 affected stores belonging to Intermarché, Netto, Coopérative U, Carrefour, E.Leclerc, and Monoprix.
• The stores used refrigeration-control equipment from Danfoss; affected models included legacy AK-SM800 and AK-SC355 systems.
• Attackers reportedly extended defrost cycles from one hour to eight hours and delayed alarms. Some installations reportedly reached about 50°C, with equipment damage and fires also reported.
• Les Mousquetaires estimated losses at several million euros. The incident caused food waste and disrupted store operations.
• CERT-FR recommends limiting controller network access, factory-resetting systems where compromise is suspected, patching, changing credentials, reviewing accounts, and reconfiguring equipment.
• The attackers have not been publicly identified, and no responsibility claim has been reported. Some stores have resumed operations.
• A separate network security issue at Ahold Delhaize was reported around the same time; no link to the French attack has been established.

Vendors

Products

Countries

Industries