French supermarkets targeted by massive defrost cyberattack

Hundreds of French supermarkets saw their refrigeration systems defrosted, spoiling tons of frozen food. The unprecedented attack has raised serious questions about food security across Europe.

Hundreds of French supermarkets were forced to throw away perishable goods on Monday after hackers commandeered refrigeration systems across the country, spoiling stock at major chains in a sophisticated overnight cyberattack.

Hackers destroyed the food by taking control of refrigeration systems at Cooperative U, Leclerc, Les Mousquetaires, and Intermarche stores across the country and then defrosting thousands of freezer and refrigeration units.

During the overnight attack, in some cases, fully-stocked fridges were heated up to 50 degrees Celsius (122 degrees Fahrenheit) for more than six hours.

Over 400 stores were hit according to retailers.

Prosecutors in Paris confirmed the attacks and said fires had been reported at some locations.

Intermarche said impacted stores had no choice but to "throw away all fresh and frozen products."

Leclerc told French news agency AFP that "a cyberattack affected one of its refrigeration equipment suppliers," triggering "repercussions on the operation of refrigeration systems in several stores."

How were the refrigeration systems accessed?

The refrigeration systems targeted were reportedly from Danish supplier Danfoss, something suggested by Prime Minister Sebastien Lecornu's office, which reportedly identified "a vulnerability in software supplied by a Danish company and has contacted the vendor."

Danfoss said ​it was "aware of incidents in France affecting a limited number of refrigeration management systems," adding that the units in question "were running outdated firmware."

Danfoss said it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions."

Prime Minister Lecornu's office has tasked the French cybersecurity agency ANSSI with investigating the attack and is "liaising with its European counterparts, as other countries may be affected."

"Security issues" were also reported in Belgium, Luxembourg and the Netherlands, with Dutch supermarket chain Ahold Delhaize saying it had taken refrigeration systems offline to protect them, though the company added that it saw no connection to the French attacks.

Attacks on food supply now 'a reality'

It is currently unclear who could have been responsible for the cyberattack, and no group or individual has yet to claim responsibility. 

The incident comes amid growing concern over vulnerabilities related to industrial ransomware and cyberattacks by malign actors in general, as well as heightened sensitivity toward Russian hybrid attacks in the midst of rising tensions over the war in Ukraine.

Last month, French President Emmanuel Macron — a strong supporter of Kyiv's self-defense against Russia — ordered measures put in place to protect France's critical infrastructure from Kremlin "hybrid attacks."

Cooperative U CEO Dominique Schelcher, wrote on X: "Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is extremely serious and is unprecedented. It is unacceptable."

"Food security requires more attention at all levels," wrote EU Food and Agriculture Commissioner Christophe Hansen on X, who condemned the attack, adding that the "exploitation of food" is now a "reality."

If you rely on our team for trusted reporting, please take a moment to select us as your Preferred Source on Google, so you'll always see our verified news first.

Edited by: Wesley Rahn