Cyberattack Spoils Food in Hundreds of French Supermarkets

A cyberattack has targeted refrigeration systems in hundreds of French supermarkets, causing food to spoil and resulting in losses estimated in the millions of euros. The attack, described as ‘extremely serious and unprecedented’ by Coopérative U’s chief executive, affected stores belonging to Intermarché, E.Leclerc, and Coopérative U, with reports of refrigerators warming to 50C (120F) overnight. Intermarché reported that affected stores were forced to discard all fresh and frozen food to avoid health risks, while an Intermarché and an E.Leclerc store in Haguenau estimated combined stock damages at €270,000 (£225,000). Prosecutors in Paris have confirmed the attack and indicated it prompted fire outbreaks. Security experts believe hackers exploited vulnerabilities in remote management software manufactured by Danfoss. The full scale of the attack remains unclear, though reports indicate other supermarket chains, including Carrefour and Monoprix, may also have been targeted. French law enforcement and the national cybersecurity agency ANSSI have opened an investigation. This attack follows previous cyber incidents in France, including breaches of the tax agency and healthcare data processors, highlighting the growing vulnerability of French critical supply chains to third-party software breaches. Dominique Schelcher, chief executive of Coopérative U, stated staff are “fully mobilised” to restore the situation and called for an investigation, deeming the targeting of essential food supply equipment ‘unacceptable.’

Where they differ

• The Independent and Politico.eu both emphasized the exploitation of vulnerabilities in Danfoss software, while the BBC did not highlight this detail.
• Politico.eu focused on Prime Minister Lecornu’s personal monitoring of the situation and his request for ANSSI’s involvement, details not present in the BBC or Independent reports.
• The Independent provided a more detailed account of previous cyberattacks in France, including specific data breaches and the number of affected individuals, while the BBC and Politico.eu offered less detail on these prior incidents.

What is not yet known

• The full extent of the attack, including the total number of affected stores and the overall financial losses, remains unclear.
• The identity of the hackers and their motives are still under investigation.

Background

• Danfoss manufactures remote management software used in refrigeration systems [background knowledge].
• France has experienced previous cyber incidents, including breaches of its tax agency and healthcare data processors [Fact Refinery, 2026-10-06].
• France’s sovereign debt is under pressure, with yields nearing levels not seen in two decades and deficits exceeding EU targets [Fact Refinery, 2026-10-06].
• In Gary, Indiana, thousands remained without power for nearly two weeks following storms, disproportionately impacting the Black community [Fact Refinery, 2026-08-25].

Our reading

Our reading is that this cyberattack represents a significant escalation in targeting critical infrastructure, moving beyond data breaches to directly threaten the food supply. The reported targeting of multiple supermarket chains and the severity of the impact, refrigerators reaching 50C, suggest a coordinated and potentially sophisticated operation. The fact that the attack follows previous cyber incidents in France indicates a pattern of vulnerability and a potential lack of sufficient preventative measures.

What to watch

• The identity of the hackers and their stated or apparent motives, as revealed by the ongoing investigation [French law enforcement/ANSSI].
• The total financial losses incurred by the affected supermarket chains, as reported in their financial statements [company reports/financial news].
• Whether Carrefour and Monoprix confirm they were also targeted, and the extent of any damage [company statements/news reports].

Was this useful? 👍 0 👎 0

---

Read the original coverage