"Unprecedented" cyberattack targets refrigerators of French grocery chains

An overnight cyberattack on the refrigeration systems of major French grocery chains has forced hundreds of stores to discard large quantities of fresh and frozen food, with early estimates suggesting losses in the millions of dollars.

According to a report by Agence France-Presse (AFP), hackers struck between 150 and 200 Intermarché locations and nearly 100 Coopérative U outlets, while Reuters reported that 80 Carrefour stores and 5% of Monoprix stores had been hit. 

French prosecutors also confirmed to AFP that the attack caused fires in some locations.

Writing on X, Coopérative U chief executive Dominique Schelcher said, "Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented."

Sources told BFM Business the attack appears to have targeted outdated versions of control software made by Danfoss, one of the world’s largest manufacturers of refrigeration systems. Hackers were able to start a continuous defrost cycle at temperatures of up to 50 C that lasted for hours before store employees detected the issue.

READ: Advisor Sumit Bhatia on how to deal with cyberattacks

In August, a report from researchers at cybersecurity firm Claroty identified several vulnerabilities in Danfoss AK-SM 800A controllers, which manage commercial refrigeration systems. The revelation prompted Danfoss to issue updated firmware. Whether the hackers exploited these specific vulnerabilities is unclear.

The total financial toll of the attack is still undetermined, but given the scale of store disruptions, costs could easily reach millions. A manager at one Intermarché location told Le Figaro her store discarded food valued at roughly 50,000 euros (approximately C$80,000).