Massive Cyberattack Hits Hundreds of French Supermarkets as Hackers Destroy Frozen Food and Trigger Fires

A massive cyberattack targeting supermarket refrigeration systems across France has left hundreds of grocery stores struggling with destroyed food supplies, damaged equipment and reported fires after hackers remotely manipulated temperatures in refrigerators and freezers to reach as high as 50 degrees Celsius (122 degrees Fahrenheit). The coordinated disruption began overnight between October 11 and 12, 2026, affecting major supermarket chains including Intermarché, Carrefour, Coopérative U and Monoprix, with additional retailers reporting problems as the scale of the attack became clearer. French authorities launched a criminal investigation after refrigerated and frozen products were rendered unsafe for consumption, forcing employees to empty entire sections of their stores and dispose of large quantities of merchandise. The Paris prosecutor's office confirmed that the «large-scale» cyberattack was «affecting connected refrigerators in several major food retailers across France,» with damage including «food losses and fires.» Approximately 700 stores may have been affected, according to estimates cited by French media, although the precise number remains under investigation. Prime Minister Sébastien Lecornu ordered France's national cybersecurity agency, ANSSI, to investigate the unprecedented disruption, which has raised concerns about the vulnerability of essential food distribution infrastructure to malicious digital interference.

Unlike conventional cyberattacks involving stolen customer information or ransomware that locks computer systems, the operation targeted the electronic controls responsible for maintaining safe temperatures inside commercial refrigeration equipment. Investigators believe attackers gained remote access to connected systems and manipulated their automatic defrosting functions, which normally activate for short periods to prevent ice from accumulating around cooling components. By modifying temperature settings and extending defrost cycles, the hackers effectively transformed equipment designed to preserve food into systems capable of producing dangerously high temperatures. Some refrigerators reportedly reached 50 degrees Celsius for several hours, leaving frozen products thawed and refrigerated merchandise exposed to conditions far beyond food safety limits. According to technical findings reported by French media, certain defrost cycles were extended from approximately one hour to eight hours, preventing the cooling equipment from returning to normal operating temperatures. The operation demonstrated how remotely accessible industrial controls can be exploited to cause physical damage without attackers ever entering the affected buildings. Cybersecurity specialists have also raised concerns about outdated software and internet-connected refrigeration systems that may lack sufficient protections against unauthorized access.

The consequences became apparent when supermarket employees arrived for work on Monday morning and discovered refrigerators filled with spoiled merchandise, partially thawed frozen products and, in some locations, damage caused by overheating equipment. Les Mousquetaires, the retail group behind Intermarché, confirmed that approximately 150 of its stores had been affected, with refrigeration temperatures reaching 50 degrees Celsius for as long as six hours. A company spokesperson said all compromised food was discarded to eliminate potential health risks for consumers. Carrefour separately reported that around 80 of its supermarkets were affected, although the overwhelming majority of its approximately 6,000 locations remained operational. At an Intermarché in central Paris, employees were seen throwing large quantities of defrosted products into disposal containers, including ice cream that had melted inside its packaging. In Gradignan, near Bordeaux, store owner Charles Dezon described a particularly destructive incident in which overheated refrigeration equipment reportedly triggered a fire suppression system, flooding part of his supermarket and compounding the damage. Beyond the immediate destruction of frozen meals, meat, dairy products and other perishables, retailers faced the costly challenge of cleaning affected facilities, inspecting their equipment and replacing inventory. Intermarché president Thierry Cotillard estimated that the attack could produce tens of millions of euros in losses nationwide in a single day, underscoring the financial consequences of sabotaging systems essential to preserving food.

The cyberattack has exposed significant weaknesses in the digital infrastructure controlling commercial refrigeration systems, particularly equipment operating with outdated software or insufficient protection against unauthorized remote access. French cybersecurity investigators identified vulnerabilities affecting systems manufactured by Danish company Danfoss, while equipment associated with American manufacturer Copeland and its Dixell brand was also targeted. According to CNN, more than 1,700 instances of affected Danfoss software had been publicly accessible through the internet in France before the attack, potentially allowing hackers to manipulate refrigeration controls from remote locations. Cybersecurity company Claroty had already identified vulnerabilities affecting some of these controllers earlier in 2026, raising questions about whether previous warnings had been adequately addressed. Danfoss acknowledged that many affected devices were outdated and stated that it had «long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions.» The manufacturer explained that older equipment had reached the end of its supported lifespan and no longer received regular security updates. The incident has intensified scrutiny of supermarket operators and third-party maintenance providers responsible for keeping essential refrigeration systems protected against increasingly sophisticated cyber threats.

The French government has launched an investigation into the nationwide disruption, with Prime Minister Sébastien Lecornu directing the National Cybersecurity Agency, ANSSI, to examine the compromised refrigeration systems and identify the vulnerabilities exploited by the attackers. The Paris prosecutor's cybercrime unit is also investigating the incident, while reports of additional attacks involving Dixell equipment emerged on October 13. Economy Minister Roland Lescure addressed the seriousness of the disruption before lawmakers, declaring, «When we discovered this cyberattack, it worried us about the ability of our distribution chains to properly deliver food to all our fellow citizens.» He added, «This is a wake-up call for everyone.» The incident comes just weeks after President Emmanuel Macron warned about the growing threat of cyberattacks and foreign interference targeting France's critical infrastructure. Speaking in September, Macron had referred to the «Russian hybrid threat facing Europeans and France,» warning that the danger had «intensified» in recent weeks. However, French authorities have not attributed the supermarket attacks to Russia or identified any group responsible. Investigators are examining whether the operation was intended to cause economic damage, disrupt essential services or exploit poorly secured equipment without a broader political objective.

The consequences of the attack have extended beyond France, raising concerns that similar vulnerabilities could threaten food retailers and refrigerated supply chains throughout Europe. Cybersecurity researchers reported comparable incidents affecting refrigeration equipment in Spain, Portugal, Poland, Germany and Belgium, although the full extent of the disruption remains under investigation. Separately, Dutch supermarket operator Ahold Delhaize experienced a security incident that forced some digital services offline, but the company has not established a connection between its problems and the French attacks. European Commissioner for Agriculture and Food Christophe Hansen warned about the broader implications for food security, declaring, «The weaponization of food has become a reality.» The incident also follows reports of similar refrigeration disruptions affecting approximately a dozen American military grocery stores in August, although investigators have not publicly established whether the events were connected. Despite the destruction of significant quantities of food, French officials have reassured consumers that the attacks do not currently threaten the country's overall food availability. Nevertheless, the operation has demonstrated how weaknesses in ordinary connected equipment can produce substantial physical and financial damage, disrupting businesses and destroying essential goods without requiring hackers to enter a single supermarket.

Created by humans, assisted by AI.