Hackers compromise refrigeration systems at French supermarkets, causing fires and food spoilage

Danfoss: Danfoss is a Danish multinational company specializing in industrial and commercial refrigeration and climate control solutions. Its refrigeration management software was identified by French authorities as containing a vulnerability that enabled the unauthorized temperature adjustments in supermarket systems. The company noted that affected units were running outdated firmware and has advised customers on updates and migrations to newer solutions. Monoprix: Monoprix is a French supermarket chain focused on urban and convenience retail formats. It experienced effects from the cyberattack at a portion of its stores where refrigeration systems were manipulated. The company is among the retailers working to restore normal operations after the incident. Carrefour: Carrefour is a global retail company operating a large network of supermarkets and hypermarkets in France and internationally. Multiple of its French stores were targeted in the cyberattack that compromised refrigeration controls and led to food spoilage. The retailer confirmed the incidents as part of the broader wave affecting major French food chains. Cooperative U: Cooperative U is a French supermarket group operating under cooperative ownership. Its systems were targeted in the cyberattack on refrigeration equipment essential for fresh product preservation. The group's leadership described the attack as unprecedented in its focus on critical food supply infrastructure. Ahold Delhaize: Ahold Delhaize is a major international grocery retailer headquartered in the Netherlands with extensive operations in Europe and the United States. It reported a separate cybersecurity incident affecting its network and temporarily took systems offline as a precaution while confirming no confirmed connection to the French events. The company operates chains including Albert Heijn in the Netherlands and several US banners. Les Mousquetaires: Les Mousquetaires is a leading French retail cooperative that operates the Intermarche supermarket chain across the country. It was directly impacted by the cyberattack when hackers accessed and raised temperatures in connected refrigeration systems at multiple locations. The group responded by discarding affected inventory to maintain food safety standards. Sebastien Lecornu: Sebastien Lecornu is the Prime Minister of France. He directed the National Cybersecurity Agency (ANSSI) to lead the investigation into the large-scale attack on connected refrigeration systems in French supermarkets. His office stated that France is coordinating with European partners to evaluate potential wider impacts. Thierry Cotillard: Thierry Cotillard is the CEO of Intermarche, a major supermarket chain owned by Les Mousquetaires. He publicly addressed the scale of losses from spoiled inventory following the cyberattack on store refrigeration systems. Cotillard characterized the event as unprecedented for the retail sector. Christel Delberghe: Christel Delberghe serves as director general of Eurocommerce, the European retail association. She highlighted the incident as a demonstration of the need for greater resilience throughout retail supply chains. Her comments underscore industry-wide concerns about cybersecurity threats to essential operations. Prior Incidents: Similar disruptions to refrigeration systems occurred at US military commissaries in late August, resulting in comparable food losses. Regulatory Response: French retail associations have called for full transparency from equipment suppliers regarding software vulnerabilities to help protect consumer supply chains. Cybersecurity Research: Research published earlier in the year by Claroty's Team82 detailed vulnerabilities in specific Danfoss refrigeration controllers that could allow attackers to bypass authentication and execute code.