Cyber Attack on French Supermarkets Heated Fridges to 50C: The Key Figures

A cyber attack on refrigeration systems has hit supermarkets across France, forcing stores to throw away fresh and frozen food after hackers drove fridge and freezer temperatures sharply upward overnight into Monday. The BBC reported that the spoiled stock is estimated to be worth millions of euros.

The Paris prosecutor's office has opened an investigation. Coopérative U chief executive Dominique Schelcher called the attack "extremely serious and unprecedented." The full scale remains unclear, and reports differ on how many stores were affected.

The central figures

• 50C (120F): The temperature some refrigeration units reportedly reached after hackers gained control of the software that regulates them, according to the BBC. The Independent reported that attackers reprogrammed cooling regulators to force a continuous defrost cycle.
• Six hours: How long Intermarché said its fridges stayed heated to 50C overnight into Monday, according to Reuters, as cited by the BBC. The retailer said it discarded all the affected food to avoid health risks.
• More than 100 / almost 100: The number of Coopérative U stores targeted. The BBC, citing AFP, reported more than 100. The Guardian, citing the retailers, reported almost 100.
• At least 300 / 150-200: The number of Intermarché and Netto stores affected. The BBC, citing AFP, reported at least 300 stores across the two brands. The Guardian reported an estimated 150-200 Intermarché shops. The Independent put the overall total at more than 150 supermarkets.
• €270,000: The combined losses reported by two supermarkets in the Alsace region, according to BFMTV as cited by the BBC. The Independent, citing the regional outlet Sud Ouest, said the figure covered an Intermarché and an E.Leclerc store in Haguenau. Intermarché did not give a company-wide loss figure, the Guardian reported.
• 26.5C: The reading on a freezer in an ice cream aisle, shown in an image published by BFMTV.

What is behind the attack

According to the BBC, hackers reportedly took control of the software that manages temperatures in the refrigeration units. Staff told reporters they were met by waves of hot air when they opened freezers on Monday morning.

The Independent reported that security experts believe the attackers exploited weaknesses in remote management software made by the cooling systems company Danfoss. A source close to Lecornu told the outlet that France's national cybersecurity agency, ANSSI, had identified a vulnerability in software supplied by the Danish company.

Danfoss said it was aware of incidents in France affecting a limited number of refrigeration management systems. It said the affected units were running outdated firmware. The company said it had long advised customers to keep supported systems updated and to move legacy systems to current-generation solutions.

Beyond Intermarché, Netto and Coopérative U, other chains may also have been affected. The BBC said specialist retail and local media reported attacks on stores from Carrefour, E.Leclerc and Monoprix. The Guardian, citing BFM TV, said E.Leclerc was affected, though the chain did not immediately confirm it. The BBC said it had approached the chains for comment.

The Guardian reported that Paris prosecutors said the attack prompted outbreaks of fire. They said the investigation would identify victims and establish the link between the attack and reported damage, including food losses and the fires. The Independent reported that ANSSI is also involved in the effort to identify the origin of the attack.

Why it matters for shoppers and retailers

For customers, the most direct effect is on food supply at affected stores. Intermarché said branches hit by the attack must discard all of their fresh and frozen products. Coopérative U said its refrigeration systems had been affected since Sunday night, and Schelcher said teams were working with refrigeration specialists to restore normal operations as quickly as possible.

The financial consequences may reach beyond the lost stock. Intermarché condemned the food waste and the financial losses and warned that insurance policies might not cover this type of in-store incident. The Guardian reported that it gave no figures.

Officials framed the attack as a food-supply issue. Schelcher called for an investigation and said targeting equipment essential to the French food supply was unacceptable. European Food Commissioner Christophe Hansen condemned the hack on X, saying food security needs more attention at all levels.

The Independent noted two earlier attacks on French systems. In August, hackers breached the tax agency's systems, compromising records for 678,000 taxpayers and businesses. In early 2024, attackers compromised the payment processors Viamedis and Almerys, exposing personal data of 33 million healthcare policyholders. The Guardian added that French President Emmanuel Macron last month ordered measures to protect critical infrastructure from Russian "hybrid attacks."

What happens next

Prosecutors and ANSSI are investigating to identify the origin of the attack and the full list of victims. Retailers are working to restore their refrigeration systems. The final tally of affected stores and financial losses has not yet been established.

Sources: BBC News, The Independent, The Guardian