Hackers raised temperatures at hundreds of French supermarkets to 50°C, spoiling food and sparking fires, according to multiple reports. The attack targeted refrigeration systems, affecting major chains like Intermarché and Coopérative U, and highlighted vulnerabilities in connected infrastructure.
Attack Mechanism and Affected Retailers
Hackers remotely triggered defrost cycles in refrigeration systems, raising temperatures to 50°C (122°F) at hundreds of French supermarkets, according to reports from ABC News, The Jerusalem Post, and Aljazeera. Monoprix, which operates about 490 stores in France, said 5 per cent of its stores were affected, with staff discarding spoiled food. Coopérative U and Carrefour also reported disruptions, while Monoprix noted 5% of its stores were impacted. The attack, described as “unprecedented” by Cooperative U CEO Dominique Schelcher, targeted equipment essential to food preservation, leading to fires and significant losses.
Carrefour confirmed 80 of its supermarkets were hit, while Monoprix, which operates about 490 stores in France, said 5% of its locations were affected. Les Mousquetaires, owner of retailer Intermarché, reported fridges at around 150 stores were heated to 50°C overnight for six hours. Intermarché told AFP that affected branches would have to throw away all of the products
that were fresh or frozen. A spokesperson for Les Mousquetaires stated all affected food had been discarded to eliminate health risks.
Danfoss Systems and Security Vulnerabilities
The attack exploited vulnerabilities in Danfoss AK-SM 800A controllers, which managed refrigeration systems at affected stores. Danfoss, a Danish manufacturer, confirmed that the affected systems were running outdated firmware
and had long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions.
Cybersecurity firm Claroty identified flaws in the controllers in August 2026, noting that attackers could bypass authentication controls.
Intermarché told AFP that affected stores would have to throw away all of the products
that were fresh or frozen. In Haguenau, an Intermarché store lost frozen food worth €50,000, while a nearby Super U store discarded goods valued at €220,000. The confirmed losses from two Haguenau stores alone reached €270,000, according to Hackread.
French cybersecurity firm Sekoia Threat Detection and Research’s senior analyst Felix Aime noted that Spain, Portugal, Poland, Germany, and Belgium had also been affected.
Financial and Operational Impact
The attack disrupted operations at affected stores, with some forced to close sections for safety checks. Online orders, which account for about 10 per cent of Albert Heijn sales, were impacted as physical stores remained open. Dutch retailer Ahold Delhaize, which operates Albert Heijn, said there was no reason to see a link between the incidents in France and its supermarkets. However, rival retailers saw a surge in delivery orders, according to the Dutch news agency ANP.
Calls for Enhanced Cybersecurity
European Commissioner for Agriculture and Food Christophe Hansen condemned the attack, noting that the weaponization of food has become a reality.
He called for increased attention to food security at all levels.
Cybersecurity analyst Steven Lachance warned that the attack could foreshadow more severe threats, such as targeting energy infrastructure or hospitals. It could target energy infrastructure or hospitals,
he said. Danfoss urged retailers to update systems and remove direct internet exposure, while the Australian Signals Directorate highlighted the risks of operational technology systems.
International Implications and Ongoing Investigations
The attack has raised concerns about global food supply vulnerabilities. In Australia, insurers face questions about coverage for similar incidents, as the cold-chain infrastructure is widely used. The average cost of an operational technology cyber incident for Australian and New Zealand organizations reached US$2.04 million in 2026, according to Claroty’s research.
French authorities are investigating the incident, with the Paris prosecutor’s office seeking to identify victims and establish links between reported damage and food losses. The attack has also prompted calls for international measures to prevent such incidents, with experts warning that otherwise it’s just going to keep happening.
The Paris prosecutor’s office confirmed the attack affected connected refrigerators in several major food retailers across France,
though no immediate estimate of industry-wide losses was provided.