# Cyberattack on French supermarket refrigeration systems

> Live situation record from CLSTR: https://clstr.news/situations/20261015-cyberattack-on-french-supermarket-refrigeration-systems
> Updated: 2026-10-26T20:55:02.000Z. Sources: 100. Developments: 3.

A massive cyberattack targeted the internet-connected refrigeration controllers of hundreds of supermarkets across France, causing widespread food spoilage and potential fire hazards. Hackers remotely accessed temperature controllers from manufacturers including Danfoss, Copeland, and Dixell, triggering defrost modes that raised temperatures as high as 50°C.

Approximately 700 of the country’s 10,000 supermarkets were affected, with major retailers such as Intermarché, Carrefour, Coopérative U, Monoprix, and Leclerc reporting impacts. Intermarché’s CEO, Thierry Cotillard, described the attack as “unprecedented,” noting that financial losses nationwide, including inventory loss and infrastructure damage, could reach tens of millions of euros. Intermarché specifically reported that roughly 150 of its stores were affected.

The French national cybersecurity agency (ANSSI) and the Paris prosecutor’s office have launched investigations into the incident. Security experts noted that many compromised devices were running outdated firmware or were end-of-life models that no longer received security updates, highlighting significant vulnerabilities in digitized food supply chains and industrial control systems. 

Investigations have identified specific compromised product families, including Danfoss AK-SC and AK-SM models, as well as Copeland XWEB and Dixell brands. Experts noted the attack exploited basic vulnerabilities, such as exposed management interfaces and predictable credentials, rather than highly sophisticated methods. The incident has also raised international concerns; in the Netherlands, supermarket operator Ahold Delhaize reported a related security issue and took several systems offline as a precaution.

Following the French incidents, research from Forescout’s Vedere Labs identified 12,976 internet-exposed refrigeration service observations across 6,017 public IP addresses in 99 countries. Experts, including Vincent Strubel of ANSSI, emphasized that the breaches resulted from elementary security failures like direct internet exposure and weak passwords. This widespread exposure poses critical risks to other temperature-dependent sectors, including hospitals, pharmacies, and pharmaceutical supply chains.

## Claims

- Approximately 300 Intermarché or Netto stores experienced freezers heating to 50°C for six hours overnight. (disputed by 12 sources)
- 80 Carrefour supermarkets were affected by the attack. (corroborated by 12 sources)
- The attack was large-scale and affected connected refrigerators in several major food retailers across France. (corroborated by 11 sources)
- The vulnerability affected a 'limited number' of systems running on outdated firmware. (corroborated by 10 sources)
- Hackers manipulated refrigeration controllers to raise temperatures to as high as 50 degrees Celsius (122 degrees Fahrenheit). (corroborated by 10 sources)
- More than 100 Coopérative U outlets were targeted by the cyberattack. (corroborated by 9 sources)
- Approximately 5 percent of Monoprix's 490 stores were hit. (corroborated by 9 sources)
- Approximately 700 out of 10,000 supermarkets in France were affected by the cyberattack. (corroborated by 8 sources)
- The cyberattack targeted Danfoss remote refrigeration management software. (corroborated by 7 sources)
- Many affected systems were outdated models that no longer received security updates. (corroborated by 7 sources)

## Timeline

### 2026-10-26: Cyberattacks on refrigeration systems expose global food supply risks

Cyberattacks on French supermarkets have highlighted global vulnerabilities in IoT refrigeration systems, exposing thousands of devices across 99 countries to potential manipulation and food supply disruption.

4 sources. https://clstr.news/cluster/cyberattacks-on-refrigeration-systems-expose-global-food-supply-risks

### 2026-10-15: French supermarkets hit by cyberattack targeting refrigeration systems

A major cyberattack on French supermarkets manipulated refrigeration controllers, raising temperatures to 50°C and causing massive food spoilage and millions of euros in losses.

22 sources. https://clstr.news/cluster/cyberattack-on-refrigeration-controllers-hits-french-supermarkets

### 2026-10-13: French supermarkets hit by massive refrigeration cyberattack

A major cyberattack on French supermarket refrigeration systems caused massive food spoilage and millions in losses by remotely raising temperatures to 50°C via vulnerable Danfoss and Copeland controllers.

77 sources. https://clstr.news/cluster/european-supermarkets-hit-by-massive-cyberattack-on-refrigeration-systems

---
Cite as: Cyberattack on French supermarket refrigeration systems. CLSTR, https://clstr.news/situations/20261015-cyberattack-on-french-supermarket-refrigeration-systems
