Story
Oct 13, 2026
France’s Supermarket Hack Turns Outdated Refrigeration Systems Into a National Security Threat
A cyberattack that remotely defrosted supermarket refrigerators destroyed food stocks and may have sparked fires across France. Retailers called it unprecedented, while investigators and experts pointed to vulnerable legacy technology and the wider risks of connected infrastructure.
France’s supermarket system has become the latest target in a widening cyberwarfare landscape, with a remote attack turning routine refrigeration equipment into a source of food waste, financial loss and possible fire risk.
Intermarché and Cooperative U said the attack affected roughly 150–200 and nearly 100 stores respectively, while other reporting cited more than 300 Intermarché or Netto locations and over 100 Cooperative U outlets. Carrefour also reported attacks at 80 stores. The immediate impact was practical and costly: affected branches had to discard fresh and frozen products after hackers remotely forced refrigeration systems to defrost. 1
The retailers’ interpretation was stark. Cooperative U chief executive Dominique Schelcher called the incident “unprecedented” and said targeting equipment essential to preserving food was “extremely serious” and “unacceptable.” 2 Intermarché likewise warned of food waste, financial losses and possible insurance gaps for an attack of this kind.
Authorities treated the episode as more than a business disruption. Paris prosecutors opened an investigation into a “large-scale cyber-attack” and are examining whether it was linked to reported fires at some stores. France’s cybersecurity agency was also said to have identified a vulnerability in software supplied by Danish manufacturer Danfoss and alerted European counterparts.
The competing explanations converge on one point: connected industrial systems can transmit cyberattacks directly into the physical world. Danfoss said many affected controllers were legacy products no longer receiving security updates, including systems using outdated firmware. 1 Cybersecurity consultant Antoine Hautin said the simultaneous impact on hundreds of units suggested “a certain level of sophistication.”
What remains unresolved is attribution and scale. The incident has intensified French concerns about hybrid attacks, but the available evidence establishes vulnerability and damage—not who ordered the operation or whether it formed part of a broader campaign.