< Back to all clusters
[TECHNOLOGY] · France, Netherlands, Belgium · 22 sources

started · updated

French supermarkets hit by cyberattack targeting refrigeration systems

A large-scale cyberattack targeting internet-connected refrigeration controllers has affected approximately 700 supermarkets across France. The attackers remotely manipulated temperature settings, raising them to as high as 50 degrees Celsius (122 degrees Fahrenheit) for several hours. This caused massive food spoilage, with retailers like Intermarché reporting losses in the tens of millions of euros.

The breach primarily targeted legacy or end-of-life industrial controllers from manufacturers including Danfoss, Copeland, and the Dixell brand. These devices, often running outdated firmware without recent security patches, were exposed to the internet, allowing attackers to trigger defrost cycles and spike temperatures. In some instances, the extreme heat caused electrical fires and water damage.

French authorities, including the Paris prosecutor's office and the National Cybersecurity Agency (ANSSI), have launched investigations. While the primary impact was in France, similar vulnerabilities have raised concerns in other European countries, including the Netherlands, where a major supermarket chain reported a related cybersecurity incident that disrupted home deliveries. Experts warn that the attack highlights the growing risk to physical infrastructure through the exploitation of vulnerable IoT and operational technology (OT) systems.

Entities

ANSSI · Carrefour · Copeland · Danfoss · France · Intermarché

Claims

What the coverage asserts, and how many sources carry each claim.

Sources