Cyberattack overheats refrigeration at hundreds of French supermarkets

Hundreds of stores affected

A cyberattack on internet-linked refrigeration systems caused fridges and freezers at hundreds of French supermarkets to overheat overnight into Monday. Retailers affected included Intermarché, Netto, Coopérative U, Carrefour, Monoprix and E.Leclerc. BBC Business+1

The full scale remains uncertain. The BBC reported figures suggesting about 400 stores were affected, including 180 Intermarché and Netto outlets. Al Jazeera reported more than 500 affected stores nationwide, including at least 300 Intermarché and Netto outlets. BBC Business+1

2 sources

Refrigeration controls targeted

Hackers targeted Danfoss software used to manage refrigeration remotely, forcing units to heat up rather than complete their normal brief overnight defrosting cycle. Intermarché said some units reached 50C for six hours, although Danfoss did not confirm the reported temperatures. BBC Business

Danfoss told the BBC that affected units were older models whose security software could not be updated to address an identified risk. It told AFP that most affected control systems were legacy products with outdated firmware and said it had previously advised supermarkets to update them. BBC Business+1

2 sources

Food discarded and losses assessed

Retailers removed affected food to protect customers, and some Intermarché and Netto display units remained out of service on Monday afternoon. At Intermarché La Haye, director Julien Freret said refrigeration reached 27C and described a total loss of fresh and frozen products, apologising to customers. BBC Business+1

The nationwide financial loss is not yet established. BFMTV reported that two supermarkets in Alsace lost €270,000 between them. A Les Mousquetaires spokesperson said the group was awaiting assessments from a court-appointed bailiff and insurance experts for more precise damage figures. BBC Business+1

The BBC and Al Jazeera reported small fires in some locations. A Les Mousquetaires spokesperson said overheating caused smoke in some of its stores but that no fires had been reported. BBC Business+2

4 sources

Investigation and security advice

French prosecutors opened a cybercrime investigation into what the Paris prosecutor’s office described as a large-scale attack on refrigeration at major food retailers. Those responsible have not been identified. BBC Business+1

France’s cybersecurity agency advised companies operating affected models to disconnect them from the internet or restrict access, and to perform software updates. Coopérative U chief executive Dominique Schelcher said staff were working with refrigeration specialists to restore operations. BBC Business+1

2 sources