started · updated
French supermarkets hit by cyberattack targeting refrigeration systems
A large-scale cyberattack targeting internet-connected refrigeration controllers has affected approximately 700 supermarkets across France. The attackers remotely manipulated temperature settings, raising them to as high as 50 degrees Celsius (122 degrees Fahrenheit) for several hours. This caused massive food spoilage, with retailers like Intermarché reporting losses in the tens of millions of euros.
The breach primarily targeted legacy or end-of-life industrial controllers from manufacturers including Danfoss, Copeland, and the Dixell brand. These devices, often running outdated firmware without recent security patches, were exposed to the internet, allowing attackers to trigger defrost cycles and spike temperatures. In some instances, the extreme heat caused electrical fires and water damage.
French authorities, including the Paris prosecutor's office and the National Cybersecurity Agency (ANSSI), have launched investigations. While the primary impact was in France, similar vulnerabilities have raised concerns in other European countries, including the Netherlands, where a major supermarket chain reported a related cybersecurity incident that disrupted home deliveries. Experts warn that the attack highlights the growing risk to physical infrastructure through the exploitation of vulnerable IoT and operational technology (OT) systems.
Entities
ANSSI · Carrefour · Copeland · Danfoss · France · Intermarché
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 10 SOURCES] Hackers manipulated refrigeration controllers to raise temperatures to as high as 50 degrees Celsius (122 degrees Fahrenheit). www.gamingtechlaw.com · columnadigital.com · www.descopera.ro · www.thecooldown.com · www.moncloa.com · +5 more
- [● 4 SOURCES] The compromise involved Danfoss refrigeration controllers, as well as systems from Copeland and the Dixell brand. www.gamingtechlaw.com · www.moncloa.com · www.descopera.ro
- [● 3 SOURCES] 80 Carrefour supermarkets were affected by the cyberattack. www.thecooldown.com · www.diningandcooking.com · www.retailbiz.com.au
- [● 2 SOURCES] The Paris prosecutor's office described the incident as a ‘large-scale’ cyberattack affecting internet-connected refrigerators at several major food retailers across France. www.thecooldown.com · www.diningandcooking.com
- [● 3 SOURCES] Vulnerabilities in these controllers were identified months before the actual attacks occurred. www.gamingtechlaw.com · www.descopera.ro
- [● 5 SOURCES] The attack could cause losses of tens of millions of euros nationwide in a single day. columnadigital.com · www.retailbiz.com.au · www.thecooldown.com · www.diningandcooking.com · www.insurancejournal.com
- [● 4 SOURCES] Approximately 700 of France's roughly 10,000 supermarkets were affected by the attack. www.gamingtechlaw.com · www.moncloa.com · www.theguardian.com · onlinemarktplatz.de
- [DISPUTED] About 150 Intermarché stores experienced refrigeration units being heated for six hours overnight. www.retailbiz.com.au · www.thecooldown.com · www.diningandcooking.com · www.insurancejournal.com · www.descopera.ro