A large-scale cyberattack targeted the refrigeration systems of multiple major French supermarket chains, resulting in the spoilage and disposal of significant quantities of temperature-sensitive food products across hundreds of stores nationwide [1]. The affected chains include Carrefour, Monoprix, Les Mousquetaires, E. Leclerc, and Coopérative U, with the CEO of Coopérative U confirming the attack and describing it as 'unprecedented' and 'unacceptable' due to its impact on essential food supply infrastructure [1].
The Paris prosecutor's office characterized the incident as a 'large-scale' attack impacting connected refrigerators in several major food retailers [1]. Carrefour reported that approximately 80 of its stores were affected, while Monoprix stated that 5% of its 490 French stores were impacted [1]. Les Mousquetaires disclosed that refrigerators in about 150 stores were heated up to 50 degrees Celsius (122 degrees Fahrenheit) for six hours, necessitating the disposal of all affected food [1].
Financial losses from the incident have not been officially calculated, but experts estimate the damage to be upwards of 10 million euros (approximately $11.2 million), with Intermarche CEO Thierry Cotillard suggesting the total could reach 'tens of millions of euros nationwide in a single day' [1]. The attack reportedly targeted refrigerator control systems manufactured by Danish company Danfoss, specifically legacy products that no longer receive software or security updates and were running outdated firmware, according to statements from Danfoss [1].
In response, French Prime Minister Sebastien Lecornu has directed the National Cybersecurity Agency (ANSSI) to investigate. ANSSI has already identified a vulnerability in software supplied by the Danish manufacturer and has contacted the vendor regarding the issue [1].
CONCLUSION
The cyberattack on French supermarket refrigeration systems has led to significant food losses and financial damage, with estimates reaching tens of millions of euros. Authorities and affected companies are actively investigating the incident and addressing vulnerabilities in legacy equipment. The event underscores the critical importance of cybersecurity in essential supply chain infrastructure.