Cyber-Attack on French Supermarket Freezers Destroys Food Across 700 Stores
Hackers remotely raised temperatures in cold aisles across France, causing widespread food spoilage and millions of euros in damage.
At a glance
- Hackers raised temperatures in up to 700 French supermarkets, driving freezers to as high as 80C and ruining food stocks.
- Intruders exploited default passwords and outdated firmware on internet-connected refrigeration controllers.
- Paris prosecutors opened an inquiry into the breach, with total retail losses estimated in the tens of millions of euros.
Cybersecurity investigators in Paris have launched an inquiry after hackers remotely tampered with internet-connected refrigeration equipment in up to 700 French supermarkets, driving temperatures up to 80C and spoiling tons of food overnight.
The coordinated attack targeted major retail chains across France, including Intermarché, Coopérative U, Carrefour, Leclerc, and Monoprix, as well as several independent grocers. Shortly before midnight, attackers manipulated digital thermostats, pushing freezer temperatures from typical sub-zero levels to over 50C. In several locations, the intense heat triggered store fires and sprinkler systems, forcing employees arriving the following morning to clear out ruined stock.
Outdated Software and Weak Security Exploited
Investigators found that attackers compromised refrigeration controllers connected to the web for remote servicing. The targeted hardware included units produced by Danish manufacturer Danfoss, alongside equipment from two other providers confirmed by the French cybersecurity agency ANSSI. Danfoss stated that it had previously flagged security vulnerabilities and advised clients to update firmware or replace obsolete models.
Security specialists noted that many compromised appliances used factory-default passwords and lacked basic security updates. The attackers deactivated warning systems and altered defrost schedules, preventing overnight alerts from reaching managers before workers discovered the damage.
Suspicions of Sabotage
No group has claimed responsibility for the incident. Cybersecurity analysts suggest the operation points toward deliberate political sabotage aimed at sowing disruption, pointing to state-backed actors or sophisticated activist groups. A comparable breach took place in the United States in August, when unapproved defrost cycles hit refrigeration units at a dozen military base commissaries.
The financial toll is projected to reach tens of millions of euros, according to Intermarché chief executive Thierry Cotillard, who noted that commercial insurance may not cover the losses. The incident has intensified scrutiny over delays in implementing stronger internet-of-things cybersecurity regulations across the European Union.
Source: The Guardian Technology.
Questions and answers
- How did hackers manipulate supermarket freezers in France?
- Hackers breached internet-connected cooling controllers, exploiting outdated firmware and default passwords. They disabled internal alarm systems and modified defrost schedules to heat the units without triggering overnight alerts.
- Which French retail chains were hit by the cyber-attack?
- The attack affected up to 700 locations across France, hitting major chains including Intermarché, Coopérative U, Carrefour, Leclerc, and Monoprix, alongside several independent stores.
- Who is suspected of carrying out the supermarket hack?
- No entity has claimed responsibility. Paris prosecutors are investigating, while cybersecurity experts suspect political sabotage by external state actors or skilled activists seeking to cause disruption.
