Cyberattack on French Supermarkets Causes Food Spoilage and Fires as Officials Investigate Vulnerable Refrigeration Systems

Vulnerabilities in refrigeration management software from the Danish company Danfoss caused the incident. Danfoss advised operators to update firmware and replace older equipment before the breach. Many retailers ignored these warnings. They continued using units with outdated software that lacked security patches. These control panels connect to the internet for maintenance. This large-scale breach, which cybersecurity firm Claroty previously identified as a risk for authentication bypass, allowed attackers to trigger forced defrosting cycles across hundreds of locations. Leclerc, and Coopérative U, as well as over 300 Intermarche and Netto stores. In addition to the massive loss of inventory, some stores reported fires, prompting Prime Minister Sebastien Lecornu to order an investigation by the National Cybersecurity Agency. Hackers accessed the panels remotely. They manipulated the units. This caused temperatures to spike to 50 degrees Celsius.

1. The French government launched an investigation to secure the national food supply chain. Prime Minister Sebastien Lecornu ordered the National Cybersecurity Agency (ANSSI) to lead the inquiry into the breach. Authorities aim to identify the perpetrators and secure national infrastructure.

2. Retailers are assessing and mitigating damage from the forced defrosting. Major chains including Carrefour, Monoprix, and Intermarche reported the impact to authorities. Carrefour stated that 80 supermarkets were affected. Monoprix reported that about 5 percent of its roughly 490 stores sustained damage.

3. The cyberattack extends beyond France. It forces a review of European retail infrastructure security. Felix Aime serves as a senior cyberthreat analyst at Sekoia. He confirmed that stores in Spain, Portugal, Poland, Germany, and Belgium were also targeted. International recognition of the threat enables cross-border cooperation to address software vulnerabilities.

4. The Paris prosecutor's office said the large-scale attack affected connected refrigerators in several major food retailers, and French authorities launched an investigation to identify those responsible.

1. Danfoss said the affected units were running outdated firmware. The refrigeration units were running outdated firmware that no longer received security updates, despite manufacturer warnings. This failure to patch known vulnerabilities left the systems exposed to the remote commands that caused the spoilage.

2. The financial damage is immediate and significant. Intermarche CEO Thierry Cotillard estimated that the attack could cause losses of tens of millions of euros nationwide in a single day. This figure illustrates the economic vulnerability of relying on connected, unpatched industrial control systems.

3. The cyberattack created physical safety risks beyond food spoilage. France 24 and Sky News World reported that forced temperature spikes reached 50 degrees Celsius. These spikes ignited fires at some supermarket locations. The transition from digital interference to physical property damage represents a notable increase in the incident's severity.

4. Security experts identified these flaws before the attack. Cybersecurity firm Claroty published research on August 9, 2026, detailing vulnerabilities in Danfoss systems. These flaws allowed attackers to bypass authentication. The systems remained vulnerable months after the report. This delay highlights concerns regarding security implementation speeds in the retail sector.