Hackers Target Supermarket Fridges Across France and Europe in Major Cyber Attack

Hundreds of grocery stores across France suffered disruptions after malicious actors infiltrated remote refrigeration management systems, raising internal temperatures to 50 degrees Celsius and sparking fires at multiple locations.

Impact and Scale

The digital breach affected major retail brands including Carrefour, Monoprix, E. Leclerc, and over 300 outlets of Intermarché and Netto, alongside more than 100 stores belonging to Coopérative U. Les Mousquetaires stated that damages across roughly 180 of its stores could reach several million euros, while Intermarché CEO Thierry Cotillard estimated nationwide losses could climb to tens of millions in a single day. Affected businesses discarded spoiled fresh and frozen inventory to protect public health, while European Commissioner for Agriculture and Food Christophe Hansen condemned the incident on social media as an alarming weaponization of food supplies.

Investigation and Response

French Prime Minister Sébastien Lecornu directed the National Cybersecurity Agency to launch a formal inquiry, with authorities also collaborating with neighboring European nations. Analysts at Sekoia Threat Detection and Research noted that the fallout extended beyond France to Spain, Portugal, Poland, Germany, and Belgium. Investigators are scrutinizing online-connected equipment supplied by Danish firm Danfoss, which noted that targeted units were running outdated firmware and advised clients to upgrade or replace vulnerable older devices following earlier warnings from cybersecurity researchers at Claroty.

Context

Modern grocery stores rely heavily on centralized, internet-linked infrastructure to monitor cooling units and manage inventory remotely without requiring constant on-site checks. When digital safeguards fail or attackers exploit outdated software on these connected industrial controls, physical operations like temperature regulation can be remotely hijacked. This incident highlights growing concerns among security experts regarding the vulnerability of everyday commercial infrastructure to remote digital intrusion.