France Opens Formal Investigation Into Supermarket Cyberattack
France launches cybersecurity and criminal investigations into the European supermarket cyberattack.
Event / Security
Europe Supermarket Cyberattacks
Coordinated cyberattacks targeting refrigeration systems at supermarkets across multiple European countries, causing food spoilage and significant economic losses.
4 reported locations
Daily activity
4 articles0 articles
2026-10-12 to 2026-10-28 · UTC publication dates
Coverage begins 12 Oct, 13:07 UTC
Follow the documented timeline or explore the related reporting.
What happened
Cyberattacks on refrigeration systems also affected Spain, Portugal, Poland, Germany, and Belgium
Beyond France, similar cyberattacks targeting connected refrigeration systems affected multiple European countries. Cyber threat intelligence analysts confirmed that Spain, Portugal, Poland, Germany, and Belgium were also impacted by attacks on refrigerator systems, suggesting a coordinated campaign across Europe.
Dutch supermarket chain Ahold Delhaize reported security incident affecting multiple countries
Ahold Delhaize, operator of the Netherlands' largest supermarket chain Albert Heijn with major operations in the US, reported a cybersecurity incident on its network. The company took several systems offline as a precaution. Albert Heijn's online delivery service was unable to operate due to the incident, though physical stores remained open. The company stated there was no reason to link the incident to the French supermarket attacks. Ahold Delhaize's US operations, including Stop & Shop, Giant, Hannaford, and Food Lion chains, also displayed website notices of temporary unavailability.
Cyberattack on French supermarkets caused widespread food spoilage and fires
The refrigeration system compromise resulted in massive food losses across affected stores. Frozen foods defrosted overnight, with molten ice cream and other perishables destroyed. The temperature increase triggered sprinkler systems in cold storage areas, causing flooding and fires at multiple locations. Intermarché CEO Thierry Cotillard estimated losses of tens of millions of euros across France from the single-day attack.
Paris prosecutor's office launched cybercrime investigation into supermarket attacks
The Paris prosecutor's office opened a formal cybercrime investigation into the large-scale attack affecting French supermarket refrigeration systems. The investigation was launched after reports of food losses and fires resulting from the temperature manipulation.
Hackers remotely heated refrigerators at hundreds of French supermarkets to 50°C overnight
On October 12, 2026, hackers gained remote control of refrigeration systems at hundreds of French supermarkets, raising temperatures to 50°C (122°F) overnight. The attack affected Intermarché (approximately 300 stores), Carrefour (80 stores), Monoprix (30 stores), Coopérative U (approximately 100 stores), and Netto stores. The hackers allegedly operated a continuous defrost cycle that heated the refrigerators throughout the night, discovered around 4 a.m. when store staff found flooded storage areas and triggered sprinkler systems.
Vulnerability in Danfoss refrigeration software enabled the French supermarket cyberattack
French cybersecurity authorities identified a vulnerability in refrigeration management software supplied by Danish company Danfoss as the entry point for the attack. The affected refrigeration control units were running outdated firmware. Danfoss acknowledged the incidents and stated that the compromised systems had not been updated with the latest firmware versions. In August 2026, cybersecurity firm Claroty's Team82 had published research detailing vulnerabilities in the Danfoss AK-SM 800A controller that could allow attackers to bypass authentication controls and execute code on devices.
Prime Minister Lecornu instructed France's cybersecurity agency to investigate the attack
French Prime Minister Sebastien Lecornu directed the National Cybersecurity Agency (ANSSI) to investigate the large-scale cyberattack. France coordinated with European counterparts to assess whether other countries had been affected and to evaluate risks to additional French companies.
Coopérative U president denounces attack on food supply infrastructure
Dominique Schelcher, president of Coopérative U, stated on social media that the cyberattack represents an unprecedented and unacceptable threat to France's food supply infrastructure. He described the attack as extremely serious, as it targeted equipment essential to preserving fresh products and ensuring the food supply for French citizens. Schelcher confirmed that crisis teams were mobilized to work with refrigeration specialists to restore systems.
Cyberattack targets Danfoss refrigeration systems at French supermarkets
A cyberattack occurred overnight from October 11 to October 12, targeting refrigeration systems managed by Danish software manufacturer Danfoss at multiple French supermarket chains. The attack affected versions of Danfoss software earlier than version 4. Attackers remotely modified temperature settings in refrigerated units, in some cases raising them to 50 degrees Celsius, causing the destruction of perishable and frozen products.
Système U and Coopérative U stores affected by refrigeration cyberattack
Multiple stores in the Système U and Coopérative U supermarket networks were affected by the cyberattack. The attack impacted an estimated fewer than 100 stores for Coopérative U. In the worst cases, stores were forced to discard all fresh and frozen products due to compromised refrigeration systems.
Approximately 150 Intermarché stores damaged by refrigeration cyberattack
Intermarché supermarket chain confirmed that approximately 100 to 150 stores were affected by the cyberattack targeting refrigeration systems. In the most severely impacted stores, refrigeration systems were deprogrammed and temperatures reached 36 degrees Celsius, requiring stores to discard entire inventories of frozen and refrigerated products.
French supermarkets report multi-million euro losses from cyberattack
The Groupement Mousquetaires (Intermarché's parent organization) estimated total losses from the cyberattack at several million euros. Individual store losses varied significantly, with some locations reporting damages of approximately 50,000 euros. Losses across all affected retailers could reach several hundred thousand euros per store.
Read the coverage
2 alternative perspectives
Cyberattack Extends Across Five European Nations Beyond France
Refrigeration cyberattacks expanded across five additional European nations, confirming continent-wide infrastructure targeting.
French Supermarkets Report Multi-Million Euro Losses From Infrastructure Attack
French supermarkets report multi-million euro losses from cyberattack on refrigeration infrastructure.
Cyberattack Disables Refrigeration Systems Across French Supermarket Chains
Cyberattack disrupts refrigeration at 150+ French supermarket stores via Danfoss system compromise.