Cyberattack Manipulates Refrigeration at French Supermarkets, Destroying Fresh Stock

A cyberattack reportedly disrupted refrigeration systems at French supermarket chains including Intermarché, E.Leclerc and Coopérative U, causing fresh products to be destroyed. BFMTV reported that attackers targeted outdated Danfoss refrigeration control software and remotely triggered forced defrost cycles, programming temperatures to reach 50°C. Approximately 150 Intermarché stores, along with stores belonging to other chains, were reportedly affected. An Intermarché and a Super U in Haguenau reportedly lost a combined €270,000 in merchandise. Coopérative U confirmed that several stores had been affected since October 11.

Coopérative U is coordinating restoration with refrigeration specialists, while the incident remains under investigation. Although previously disclosed Danfoss vulnerabilities and Claroty research show that refrigeration controllers can be manipulated, reporting has not established the vulnerability or access method used in this attack. The incident highlights the direct physical and financial consequences of compromised operational technology; retailers should prioritize checking refrigeration control settings, restricting remote access and reviewing controller software support and patch status.