France Supermarket Cyberattack: Over 480 Stores Hit as Hackers Disrupt Fridges and Freezers

A cyberattack on supermarket refrigeration systems in France has disrupted operations at more than 480 stores, with hackers reportedly interfering with internet-connected fridges and freezers and triggering defrosting cycles. The disruption caused temperatures inside refrigeration units to rise, putting fresh and frozen food at risk and forcing retailers to discard affected products.

Unlike conventional cyberattacks that target customer information, payment systems or company data, this incident hit the equipment supermarkets rely on to keep food at safe temperatures. The attack has raised concerns about the security of connected devices used by retailers and the potential financial losses when essential store operations are disrupted.

French authorities are investigating the incident, while a possible software vulnerability involving refrigeration systems supplied by Danish company Danfoss has come under scrutiny.

What Happened in the France Supermarket Cyberattack?

According to French media reports, hackers interfered with internet-connected refrigeration systems used in supermarkets across France. The affected equipment was reportedly pushed into defrosting mode, causing temperatures to rise sharply. Some reports said temperatures inside the units reached as high as 50 degrees Celsius.

The disruption affected more than 480 stores, although the impact varied by location. Some supermarkets reportedly resumed normal operations, while refrigeration equipment in certain stores remained switched off as technical checks continued.

The incident also affected the availability of refrigerated and frozen food. Products such as fresh meat, dairy items, seafood and frozen meals are particularly vulnerable when refrigeration systems stop maintaining the required temperatures. Retailers may have to discard affected stock if they cannot establish that it remained safe for consumption.

The attack therefore created a problem beyond a temporary equipment failure. Supermarkets faced the challenge of restoring their cooling systems, checking food safety and preventing potentially unsafe products from reaching customers.

Why Did Hackers Target Supermarket Fridges and Freezers?

Supermarkets depend on refrigeration systems to store perishable food throughout the day. In large stores, these systems are often managed through digital controls that allow staff and maintenance teams to monitor temperatures, operate equipment and schedule defrosting remotely.

Connecting these systems to the internet makes it easier to monitor performance and address technical problems. However, if the controls are not adequately secured, unauthorised access can allow attackers to interfere with how the equipment operates.

Defrosting is a normal part of refrigeration, as it removes ice that accumulates during cooling. The problem arises when defrosting is triggered at the wrong time or across multiple units, preventing them from maintaining the temperatures required to preserve food.

In this incident, the reported interference with refrigeration controls turned connected equipment into a potential point of failure for supermarket operations. The attack demonstrates that hackers can cause significant disruption without stealing customer data or directly targeting a company's financial systems.

Danfoss Software Vulnerability Comes Under Scrutiny

French media reports said a weakness in software supplied by Danish company Danfoss had come under investigation after the attack. The company supplies technology used to control refrigeration and freezer systems, including equipment used in commercial settings.

Danfoss reportedly acknowledged incidents in France involving refrigeration systems and said older software versions were being used. The company has previously advised customers to keep software updated and replace ageing equipment.

Cybersecurity company Claroty had also reportedly identified vulnerabilities in Danfoss systems in an earlier report dated August 9. The reported weaknesses raised concerns about whether attackers could access certain systems without adequate authentication.