Coordinated Attack Exploits Legacy Hardware
Hackers launched a large-scale cyberattack targeting connected refrigeration systems across France, forcibly overriding temperature controls at at least 350 supermarkets and raising them to as high as 50 degrees Celsius overnight. The breach, which occurred between October 11 and 12, affected major retail brands including Carrefour, Intermarché, Monoprix, and Cooperative U, causing extensive food spoilage and triggering localized fires in several stores, according to NBC News.
Staff at multiple locations in Paris and regional hubs were forced to discard vast quantities of perished meat, dairy, and frozen goods, throwing cartloads into giant industrial dumpsters. Cooperative U CEO Dominique Schelcher stated on social media that targeting essential food preservation infrastructure was an unprecedented act of extreme gravity. Prime Minister Sébastien Lecornu instructed France’s National Cybersecurity Agency (ANSSI) to launch an immediate investigation, while authorities began coordinating with European neighbors amid indications that other nations might also be exposed.
Vulnerable Danfoss Firmware and Industrial Cyber Hygiene
Cybersecurity analysts and investigators traced the vector to legacy control equipment supplied by Danish manufacturer Danfoss. The affected units relied on older firmware versions that lacked current security patches. On Monday, Sight Magazine reported that Danfoss acknowledged the impacted units were running outdated software and had long advised customers to migrate legacy equipment to current-generation solutions or apply available firmware updates.
Security researchers noted that the vulnerabilities in the Danfoss AK-SM 800A controller had been publicly detailed months prior. Cybersecurity firm Claroty published a comprehensive advisory on August 9 detailing flaws that allowed unauthorized actors to bypass authentication protocols and execute arbitrary code on exposed devices. Despite these warnings, thousands of Danfoss interfaces remained accessible via the open internet through indexing tools such as Shodan, highlighting widespread neglect of basic industrial cyber hygiene among commercial operators.
Spiralling Economic Losses and Supply Chain Security Stakes
The financial impact of the sabotage is mounting rapidly. Intermarché CEO Thierry Cotillard told BFM TV that the unprecedented strike would result in losses amounting to tens of millions of euros nationwide within a single day. Christel Delberghe, director general of the European retail association Eurocommerce, emphasized that the incident underscores the critical necessity of robust cybersecurity resilience across the entire food supply chain.
As authorities continue to hunt the perpetrators—who left no ransom demand or public claim of responsibility—security analysts point out similarities to incidents reported at U.S. military commissaries earlier in the year. Meanwhile, Dutch retailer Ahold Delhaize reported an unrelated cybersecurity incident forcing some digital systems offline, heightening concerns over systemic vulnerabilities in retail IT infrastructure across Europe.